Security at Logsync

Security isn't just a feature—it's fundamental to what we do. Here's how we protect your audit data.

Encryption at Rest

All data is encrypted at rest using AES-256 encryption in our PostgreSQL database.

Encryption in Transit

All connections use TLS 1.3. We enforce HTTPS across all endpoints.

Cryptographic Integrity

Every audit event is linked using SHA-256 hashes, creating a tamper-evident chain.

Secure Authentication

Passwords are hashed using Argon2. Sessions are cryptographically secure.

Infrastructure Security

Hosted on secure, SOC 2 compliant infrastructure with automated backups.

Data Isolation

Each customer's data is logically isolated. We never access your data without permission.

Retention Controls

You control how long data is retained. Automatic deletion after retention period.

Audit Logging

We eat our own dog food. All internal actions are audit logged.

Responsible Disclosure

We take security vulnerabilities seriously. If you discover a security issue, please report it to us responsibly.

Our Commitment: We will acknowledge receipt within 24 hours, provide an initial assessment within 72 hours, and keep you updated on our progress.

Compliance Roadmap

We're committed to meeting industry standards and are actively working toward certifications.

HTTPS/TLS Encryption
Complete
Data Encryption at Rest
Complete
Security.txt Implementation
Complete
SOC 2 Type I
In Progress
SOC 2 Type II
Planned