Security
The deal record stays protected.
Accounts, agreements, and escrow sit behind the same controls. Here is what that means for a listing, a signature, and a payout.
Controls
- Enterprise-grade security
SOC 2 Type II infrastructure with continuous monitoring and threat detection.
- Data encryption
Data is encrypted at rest with AES-256 and in transit with TLS 1.3.
- Access controls
Role-based access, multi-factor authentication, and an audit log of activity.
- Secure infrastructure
Hosted with redundancy, backups, and disaster recovery.
Practices
- Regular security audits and penetration testing
- A vulnerability management program
- Employee security training and background checks
- Incident response and breach notification procedures
- Third-party vendor security assessments
- Data minimization and retention policies
Compliance
- SOC 2 Type II
Independently audited security controls and practices.
- GDPR
Aligned with European data protection requirements.
- CCPA
Meets California Consumer Privacy Act requirements.
- PCI DSS
Card payments run through certified providers.
Report an issue
If you believe you have found a vulnerability, write security@sponsorx.co. We want to hear it immediately.