Security, compliance, and data protection documentation for enterprise customers and regulated industries including financial services, healthcare, and legal.
Our compliance roadmap for enterprise customers.
| Framework | Status | Target |
|---|---|---|
| SOC 2 Type I | In Progress | Q1 2026 |
| SOC 2 Type II | Planned | Q2 2026 |
| ISO 27001 | Planned | Q4 2026 |
| GDPR Compliant | Active | - |
| CCPA Compliant | Active | - |
| Penetration Test | Scheduling | Q1 2026 |
How we protect your data.
Request documentation for your vendor assessment.
Comprehensive security architecture and controls overview
GDPR-compliant data processing terms
SOC 2, NIST CSF, FFIEC control mapping
Third-party security assessment (available Q1 2026)
Pre-completed vendor security questionnaire
Multi-layer encryption protecting your data.
Enterprise-grade cloud infrastructure.
Enterprise identity management.
Third-party vendors that process customer data. All subprocessors maintain SOC 2 Type II certification.
| Vendor | Purpose | Data Processed | Location |
|---|---|---|---|
| Railway | Application hosting, database | All customer data | US-East |
| Vercel | Dashboard hosting | Session tokens | US-East |
| Stripe | Payment processing | Billing data only | US |
| Resend | Transactional email | Email addresses | US |
| Sentry | Error monitoring | Error logs (no PII) | US |
PromptFence is designed to support GLBA and FFIEC requirements for financial institutions.
Get in touch with our security team.
Request our security documentation package for your vendor assessment. We're happy to complete your security questionnaire.