How Gezora protects your data

1. Encryption

Gezora encrypts your data at every stage, in transit and at rest, and keeps every secret out of the codebase.

• ›Transit encryption uses TLS 1.2 or higher for every connection.
• ›Data at rest is encrypted with industry standard algorithms.
• ›Secrets such as API keys and credentials are kept in managed secret stores, never in source code.

2. Access control

Access to your data follows least privilege, so people only reach what their role requires, and every access is logged and reviewed periodically. Administrative functions require multi factor authentication.

3. Infrastructure

Gezora runs on reputable cloud providers with network isolation, hardened configuration, automated patching, and continuous monitoring.

Teams with strict data residency needs can choose private hosting, an isolated environment the customer controls directly.

• ›Reputable cloud infrastructure with network isolation
• ›Hardened configuration with automated patching
• ›Continuous monitoring across the environment

4. Compliance

Gezora controls align with the following standards. Specific certification and attestation detail is available under NDA on request.

• ›Aligns with the SOC 2 Trust Services Criteria.
• ›Supports GDPR requirements for customers operating in the European Union and the United Kingdom.
• ›Supports HIPAA requirements for customers handling protected health information.

5. Data handling

Your data belongs to you. It is never used to train models without your explicit written consent.

• ›No model training on customer data without explicit written consent
• ›A data processing addendum is available on request
• ›Sub processor lists are available on request

6. Incident response

Security updates are applied promptly, and an incident response process is in place. Any breach affecting customer data triggers notification aligned with our contractual and legal obligations.