Security
SOC 2 program in place.
Raptly has an active SOC 2 Type II engagement underway. Customer workloads run on region-pinned data planes — a UK control plane orchestrates a Canada plane and an Australia plane, and customer data stays in its region.
Everything is encrypted at rest and in transit. Access to production is role-based and reviewed on a regular cadence. Backups are taken daily and retained on a documented schedule, with restore drills built into the change management program.
Need the audit summary for a procurement review? Email hello@raptly.net and we’ll send it under NDA.
What’s covered
- Region-pinned data planes in Canada and Australia
- Encryption at rest and in transit across every service
- Role-based access control with least-privilege defaults
- Audited daily backups with documented retention
- Change management, incident response, and access reviews