Scalekit holds ISO 27001 and SOC2 certifications and conducts regular VAPT assessments to maintain high-security standards. Scalekit is also GDPR and CCPA compliant.
Scalekit stores only the data sent from identity providers. For more information, view our Privacy Policy
Customer data is stored in U.S. data centers. We’ll soon be adding support for an EU Data Center.
Yes, Scalekit uses HTTPS / TLS 1.3 to protect data in transit and at rest, safeguarding your information from unauthorized access.
Scalekit complies with GDPR and CCPA regulations. If you need to request data deletion, please contact security@scalekit.com.
Data is retained for 30 days post-termination and is then permanently deleted unless restoration is requested during that period.
The latest penetration test report can be provided to customers after signing an NDA. Contact us at security@scalekit.com for more details.
Please see our [list of subprocessors] for the most up-to-date information
Please report security issues by emailing us at security@scalekit.com. We address them as quickly as possible.