Security at Amdahl

Our systems, processes, and controls are regularly audited as part of our SOC 2 compliance program. SOC 2 Type II reports are produced annually and can be provided upon request.

We support GDPR compliance obligations through data deletion capabilities, sub-processor transparency, and clear data handling practices.

We mandate HTTPS for all services. All data stored in our infrastructure is encrypted at rest using AES-256. Encryption keys are managed through a dedicated key management service and are never stored alongside the data they protect.

Our security teams regularly scan for vulnerabilities and conduct penetration tests. We engage third-party security firms for independent assessments. Systems are regularly patched and server resources are refreshed on a regular cycle.

Customer data is logically isolated within our infrastructure. Systems responsible for storing and processing customer data operate with dedicated credentials and strict access boundaries, separate from public-facing services.

Employee access to customer data is restricted to those who need it to provide support or maintain the platform. Access to sensitive internal systems requires additional permissions beyond standard network access, and all access is logged and reviewed.

All code goes through peer review and automated testing before deployment. We monitor audit logs to detect abnormalities and watch for intrusions and suspicious activity across our infrastructure.

Every employee completes annual security education. Our engineering team receives secure software development training, and we conduct internal security awareness exercises across the organization.

We have a formal process for granting access to systems and information, and we regularly review and revoke inactive access. Actions within sensitive areas of our infrastructure require human review.