Audit Status: In Preparation

Security & Compliance Roadmap

Trust is the currency of science. While we are currently negotiating our formal SOC 2 Type I & II audit engagement, our infrastructure is already built to these rigorous standards.

Current Security Posture

Encryption Everywhere

All data is encrypted at rest (AES-256) and in transit (TLS 1.3). We use path-agnostic encryption for all R2/S3 storage buckets.

Access Control

Strict Role-Based Access Control (RBAC) enforces least-privilege access. Multi-Factor Authentication (MFA) and Passkeys are enforced for all administrative actions.

Audit Readiness

Our database architecture features immutable, append-only audit logs for all critical resource mutations, satisfying FDA 21 CFR Part 11 requirements ahead of SOC 2 certification.

Questions about our security controls? Contact our Security Team.