We take security compliance seriously

Keeping our customers' data protected at all times is our highest priority.
‍
‍

Visit our Trust Center →

Company security

  • ISO 27001 certified - report available through our Trust Center

  • SOC 2 Type II - report available through our Trust Center

  • GDPR compliant

  • Annual SOC 2 audit by an independent auditor

  • Annual independent penetration testing of our services

  • Recurring security training for all employees, enforced and monitored

System security

  • Data encrypted in transit (TLS 1.2+) and at rest (AES-256)

  • Infrastructure hosted on AWS in Europe (ISO 27001 certified, SOC1 and SOC2 reports)

  • Business continuity plan including disaster recovery and data backups

Application security

  • Flexible login options: SSO (Google, Azure AD, Okta), enterprise SSO (SAML) and MFA for password login

  • Role-based access control

  • Access control for users and API keys

  • Immutable audit trail of user actions

  • Continuous vulnerability scanning

  • Optional customer-managed file storage

🛡️ If you believe you’ve discovered a potential vulnerability, please let us know by emailing us at security@ondorse.co

Ready to take the manual work out of KYC/B?

Unlock the power of automation
Easy setup that takes just a few days
Friendly human support based in Europe
Contact us