Security at Papr
Protecting your data is foundational to everything we build. We implement industry-leading security practices to ensure your information remains safe, private, and under your control.
Compliance & Certifications
SOC 2 Type II
We are actively pursuing SOC 2 Type II certification, demonstrating our commitment to security, availability, and confidentiality controls.
HIPAA
We implement safeguards to protect health information and maintain compliance with HIPAA Security and Privacy rules.
Infrastructure Security
- ✓Cloud Infrastructure
Hosted on Google Cloud Platform with enterprise-grade security, encryption, and redundancy.
- ✓Encryption
All data encrypted at rest (AES-256) and in transit (TLS 1.2+). Database connections require SSL.
- ✓Network Security
VPC isolation, firewall rules, IAP-secured access. No open SSH/RDP to the internet.
- ✓Monitoring & Alerting
Comprehensive logging with Cloud Audit Logs, log-based metrics, and automated alerting for security events.
Application Security
- ✓Access Controls
Role-based access, MFA enforcement, least-privilege principles across all systems.
- ✓Code Security
Branch protection, required PR reviews, secret scanning, and automated dependency updates via Dependabot.
- ✓Vulnerability Management
Regular security assessments, automated scanning, and rapid patching processes.
Data Protection
- ✓Data Isolation
Customer data is logically isolated. Each workspace has separate access controls and encryption keys.
- ✓Backup & Recovery
Automated daily backups with versioning and tested recovery procedures.
- ✓Data Retention
Configurable retention policies. Data deleted upon request in accordance with our privacy policy.
Report a Vulnerability
If you discover a security vulnerability, please report it responsibly to security@papr.ai. We take all reports seriously and will respond within 24 hours.