Connections
- We start with read access
- We review connector permissions with you before setup
TRUST
Here's how we handle security.
We want you to know exactly what SecurIQ can access, how data is protected, and what we've verified so far.
At a glance
- Read-only by default
- Human approval for sensitive actions
- No SOC 2 or ISO 27001 yet
01 / ACCESS
How SecurIQ handles access
We start by reading information. Changes need your approval.
Actions & AI
- Sensitive actions require human approval and are recorded in an audit log
- AI controls include a kill switch, confidence thresholds, and a list of actions that always need approval
Application access
- Access roles, SSO, and MFA for the SecurIQ application
- Connector credentials stay on the server and are not returned to your browser after setup
02 / DATA
Data protection
Data in transit is encrypted with TLS. Data at rest is encrypted by our infrastructure providers. Details are in our Security Policy.
Data processing terms: see our Data Processing Agreement and Privacy Policy.
03 / TRANSPARENCY
Where we are today
We won't claim our hosting providers' certifications as our own.
| Program item | Current status |
|---|---|
| SOC 2 report | Not currently held |
| ISO 27001 certification | Not currently held |
| Independent penetration test | On the roadmap; contact us for current status |
| Internal security reviews | Performed |
| Vulnerability disclosure | Published policy |
Our infrastructure providers maintain their own attestations; those do not extend to TraKNC or SecurIQ.
04 / EVALUATION
[email protected] Security questionnaires
We complete reasonable security questionnaires during evaluation and onboarding.