Enterprise-Grade Security
Your data is sacred. We've built GTM Heroes with security-first architecture from day one.
SOC 2 Type II (Pending)
SOC 2 Type II is on our roadmap and not yet scheduled. Our controls align to the AICPA Trust Services Criteria for Security, Availability, and Confidentiality, and we share our security questionnaire responses and control documentation on request.
End-to-End Encryption
All data encrypted in transit (TLS 1.3) and at rest (AES-256). Zero plaintext storage.
No AI Training on Your Data
Prospect data is processed in real time and never used to train AI models. Our AI providers retain API inputs for up to 30 days for abuse monitoring only; zero-data-retention is available on request. Details on our Sub-processor page.
Infrastructure Security
Hosted on Supabase (AWS us-east-1) with network isolation, row-level security, and continuous vulnerability scanning.
GDPR & CCPA Ready
Data subject rights supported and honored on request. Data processing agreements available on request.
99.9% Production Uptime
Production uptime target. Contractual SLA terms negotiated per enterprise agreement.
Need Our Security Documentation?
We're happy to share our security questionnaire responses, control documentation, and SOC 2 audit status. The Type II report will be available under NDA on completion.
[email protected]