Security & Compliance

Security and compliance are at the core of everything we build at Zygur. We understand that our customers trust us with their most sensitive workloads and data.

Certifications

  • SOC 2 Type II certified
  • HIPAA compliant with BAA available
  • GDPR compliant
  • ISO 27001 (in progress)

Data Protection

All data is encrypted in transit (TLS 1.3) and at rest (AES-256). We use industry-leading key management systems and rotate encryption keys regularly.

Infrastructure Security

Our infrastructure is built on AWS with multi-region redundancy. We implement defense-in-depth strategies including network segmentation, intrusion detection, and regular penetration testing.

Audit Logging

Every action in Zygur is logged with tamper-proof audit trails. Logs are retained for 7 years for Enterprise customers and can be exported at any time.

Report a Vulnerability

If you discover a security vulnerability, please report it to security@zygur.com