Security you can verify
Pruuvn® is trust infrastructure, so we hold ourselves to the standard we help others meet. Our controls are independently audited, documented, and available for your security team to review.
Compliance
Pruuvn® has completed a SOC 2 audit performed by Sensiba, an independent CPA firm.
| Framework | SOC 2 Type II |
|---|---|
| Independent auditor | Sensiba |
| Trust Services Criteria in scope | Security |
| Audit period | April 2026 to April 2027 |
The full report is confidential. We share it with customers and qualified prospects on request, under NDA. Use the button above and our team will respond within 10 business days.
How we protect your data
These are the controls covered by our audit.
Encryption
Data is encrypted in transit with TLS and at rest with AES-256.
Access control
Role-based access, least privilege, and multi-factor authentication for all employees and production systems. Access is reviewed quarterly.
Customer authentication
SSO and MFA options are available to customers.
Logging and monitoring
Production activity is logged and monitored, with alerts on suspicious behavior.
Vulnerability management
Regular vulnerability scanning and third-party penetration testing, at least annually.
Secure development
Code changes are peer reviewed and tested before release, with separate development and production environments.
Backups and recovery
Automated backups with tested recovery procedures.
Employee security
Background checks, security awareness training, and confidentiality agreements for all team members.
Vendor management
Third-party vendors with access to customer data are assessed against our security requirements.
Infrastructure and data
Hosting
Pruuvn® runs on AWS in US East (N. Virginia), which maintains its own SOC 2 and ISO 27001 certifications.
Data segregation
Customer data is logically separated by network and account.
Retention and deletion
Data is retained for 36 months, and deletion is available on request.
Privacy
We collect only the data needed to operate the platform. See our Privacy Policy for details.
Report a vulnerability or request documentation
If you believe you have found a security issue, email trust@pruuvn.com. Include enough detail to reproduce it. We acknowledge reports within 10 business days and will keep you updated as we investigate.
Security teams can request our SOC 2 report, security questionnaire responses, and a data processing agreement by emailing the same address. We respond to review requests within 10 business days.
Related: Privacy Policy · Terms of Service · Contact us
