Security & Compliance
Enterprise-grade security built into every layer. Your data, your rules, your control.
Security Practices
Encryption
All data encrypted at rest (AES-256) and in transit (TLS 1.2+). API keys are hashed with bcrypt. No plaintext secrets ever stored.
Access Control
Role-based access control with principle of least privilege. API key scoping, IP allowlisting, and SSO/SAML support for Enterprise.
Data Isolation
Regional data isolation ensures your visitor data stays in your chosen region (EU or US). Data is never shared with third parties.
Audit Logging
Comprehensive audit trail for all API access, configuration changes, and administrative actions. Exportable logs for compliance review.
Incident Response
Around-the-clock monitoring with automated alerting. Documented incident response playbooks with clear severity tiers and escalation paths.
Penetration Testing
Responsible disclosure program for external security researchers. Third-party penetration testing is planned as part of our SOC 2 preparation.
Compliance Certifications
We align to industry-standard frameworks and are working toward formal certification to give you confidence in our security posture.
Ready to get started?
Try Tracio free with 2,500 API calls per month. No credit card required.