Independent assurance
SOC 2
Type II independently audited controls for security, availability, and confidentiality.
Security at SuperAnnotate
Your data stays protected at every layer
Security is built into how we develop, operate, and deliver our platform. We protect the confidentiality, integrity, and availability of customer data through independently assessed controls and continuous monitoring.
Encrypted
Assessed
Monitored
Restricted
Security & privacy
Controls aligned with recognized standards and privacy frameworks
Our security and privacy program is designed and operated in alignment with recognized security standards and applicable privacy requirements.
Certification
ISO 27001:2022
Certified information security management system.
Privacy program
GDPR
Privacy program designed to support applicable GDPR requirements to protect personal data and privacy for people in the European Union.
Privacy program
CCPA
Privacy controls designed to address applicable California privacy requirements.
Defense in depth
Protection from data to deployment
Administrative, technical, and operational safeguards work together across the full lifecycle of your data.
-
Protect the data
- Encryption in transit
- Encryption at rest
- Data retention and disposal
-
Control access
- Restricted production access
- Asset inventory
- Access termination controls
-
Build securely
- Segregated environments
- Secure development policy
- Change management
-
Monitor continuously
- Security event alerting
- Annual penetration testing
- Incident response plan
Operational resilience
Security is an ongoing practice
Availability
Uptime is monitored, backups are tested through restoration, and business continuity and disaster recovery processes are maintained.
Vulnerability management
Vulnerability and patch management processes are supported by regular third-party penetration testing.
Incident response
A documented response plan governs how confirmed incidents are identified, prioritized, communicated, assigned, and tracked.
Need a deeper security review?
Visit our verified Trust Center for the latest assurance documents, or talk with our team about your requirements.