Trust Center
Security and compliance at Ostorlab
Your app binaries, source code and security reports are sensitive. Here is how we protect them.
SOC 2 Type II
Ostorlab has achieved SOC 2 Type II compliance. A Type II audit evaluates how security controls operate over a sustained period, not just at a single point in time.
Request security documentationHow we protect your data
Encryption at rest and in transit
All customer data is encrypted at rest and in transit.
Hardened cloud infrastructure
Ostorlab runs on Google Cloud's hardened infrastructure and uses Hardware Security Modules to keep your app binaries and reports protected.
On-premises deployment
Need scans to stay inside your own environment? Ostorlab can run on-premises for mobile, web and source code.
Explore on-premises scanningSecurity questions or a vendor review?
Contact us for security questionnaires, documentation, or any question about how we handle your data.