Compliance & Certifications
Enterprise-grade compliance built into every layer. Your data, your region, your control.
Certification Timeline
We pursue industry-standard certifications to give you confidence in our security posture.
Our SOC 2 Type II examination against the AICPA Trust Services Criteria for security, availability, and confidentiality is in progress.
What this means for you: Once the report is issued you can request it under NDA. In the meantime, our security team can walk you through our current controls so you can evaluate our posture today.
Built to the requirements of the EU General Data Protection Regulation. We process only technical device attributes — no personal content, no browsing history, no form data.
What this means for you: Data processing happens in the EU (Frankfurt). We provide a signed Data Processing Agreement (DPA), maintain records of processing activities, and support Data Subject Access Requests.
ISO 27001 certification for our Information Security Management System is underway.
What this means for you: Once certified, ISO 27001 provides additional assurance that our security controls meet international standards.
Data Processing Agreement
Our DPA covers all data processing activities under GDPR Article 28. It includes standard contractual clauses, sub-processor lists, and technical and organizational measures.
- GDPR Article 28 compliant processor terms
- Standard Contractual Clauses (SCCs) included
- Sub-processor list with change notification
- 72-hour breach notification commitment
- Data deletion upon contract termination
Data Region
Your data is processed and stored in the EU. Regional isolation keeps it under one jurisdiction for data sovereignty.
EU (Frankfurt)
EUAWS eu-central-1 — data never leaves the EU. GDPR-ready by default.
Questions about compliance?
Our compliance team is available to discuss your specific requirements.
compliance@tracio.ai