Security & Privacy
Your ASO data is critical to your business. We protect it with enterprise-grade security, complete transparency, and a commitment to your privacy.
View our ISO27001 certificateGovernance & Compliance
Enterprise-grade security with industry-standard certifications
- ISO/IEC 27001:2022 certified
- GDPR compliant with DPA available
- Annual third-party penetration testing
- Continuous security monitoring with Drata
- Regular security training for all employees
Product & Infrastructure Security
Defense in depth with multiple layers of protection
- SSL/TLS encryption enforced for all data in transit
- AES-256 encryption for data at rest
- Infrastructure hosted on AWS Germany with multiple availability zones
- Web Application Firewall (WAF) protection
- Daily automated database backups
Access Control
Granular permissions and authentication security
- OAuth 2.0 for Google Play Console integration
- Multi-factor authentication (MFA) available
- SAML 2.0 SSO support (Scale plan+)
- Role-based access control (RBAC)
- Session management with automatic timeouts
Application Security
Secure development lifecycle and continuous monitoring
- OWASP Top 10 protection measures
- Automated vulnerability scanning in CI/CD
- Dependency scanning and updates
- Code reviews and static analysis
- Incident response team and documented procedures
Monitoring & Incident Response
24/7 monitoring with rapid response procedures
- Real-time security monitoring and alerting
- Automated anomaly detection with malware detection
- Incident response team with documented procedures
- Business Continuity and Disaster Recovery (BCDR) plan
- Transparent security incident reporting
Data Control & Privacy
Your data, your control
Data Ownership
You retain full ownership of all your data. We're simply processors acting on your behalf.
Data Export
Bulk export all your data at any time (Scale plan+).
Data Deletion
Request data deletion at any time. We'll remove all your data within 30 days.
Data Location
All data is stored in AWS US regions. EU data residency coming in Q2 2025.
Data Retention
We retain data only as long as necessary for service provision or as required by law.
No Data Sales
We never sell, rent, or share your data with third parties for their marketing purposes.
Security Questions?
Our security team is here to answer any questions about our security posture, compliance certifications, or data handling practices.