Shared agentsSecurity Testing Agent
AI now finds vulnerabilities in minutes.
- Security & Risk Management
//Trust Center
Security and trustat DataObserve.
A comprehensive approach to data privacy and security, protecting our infrastructure, our products, and your data.
Security
Availability & disaster recovery
Multi-region architecture scales if a primary location fails. Failover is tested, with frequent backups for point-in-time restore.
Data security
Customer data protection
Minimal PII, our most critical classification, encrypted in transit with TLS 1.2+ and at rest with AES-256.
Compliance
Security review
Review security, privacy and sensitive-data requirements for your deployment.
//Overview
How does DataObserve protect customer data?
DataObserve protects customer data with security controls across the company and the platform: personnel security, secure software development, vulnerability management, incident response, data isolation and identity and access management.
In the product, customers get SSO and two-factor authentication through their identity provider, a built-in secrets manager, and an out-of-the-box audit trail of every event and change. Vulnerabilities can be reported to the team before public disclosure.
//Security
Security embedded across the company
Personnel security
Background checks for every hire; security and privacy training at onboarding and every year.
Secure software development
Every production change peer-reviewed, tested in CI, scanned, and shipped with roll-back procedures.
Vulnerability management
Infrastructure and code scanned at least monthly, remediated on NIST timelines.
Incident response
A dedicated team follows SANS PICERL and NIST SP 800-61; impacted customers are notified without undue delay.
Data isolation
Customer data never touches non-production, and every account is logically isolated.
Identity & access management
Least-privilege RBAC, SSO for critical systems, and two-factor authentication wherever possible.
//Explore more withDataObserve
More from Developer · Security & Risk Management
Runtime Protection Agent
Defend your APIs, agents, and web apps from exploits, bots, DDoS, and other attacks.
- Security & Risk Management
Mythos Readiness
Zero-days, exploding vulnerability counts, and AI-powered attackers have collapsed the time you have to respond.
- Security & Risk Management
Software Delivery Agent
From code through prod, the Software Delivery Agent automates your CI/CD and IaC delivery following your policies and golden paths.
- Software Delivery & Engineering
//Product security
Controls built into the platform
Authentication & authorization
Local auth or your corporate identity provider, with SSO and two-factor authentication enforced.
Auditing
An out-of-the-box audit trail captures every event and change.
Secret management
A built-in secrets manager stores the secrets used in your account, pipelines, and connectors.
//FAQs
Trust Center: questions teams ask
Found a vulnerability?
Tell us before disclosing it publicly. We respond within 24 hours.
How do I report a security vulnerability to DataObserve?
Contact the security team before disclosing it publicly. The team responds within 24 hours.
Does DataObserve support single sign-on?
Yes. You can use local authentication or your corporate identity provider with SSO and two-factor authentication.
Is customer data isolated?
Yes. Data isolation is one of the platform's core security controls.
