Trust & security
How Owlpane handles your data, where it runs, and how to reach us for security questions.
Security summary
- HTTPS everywhere; tenant isolation in Postgres and ClickHouse row policies on pooled cells.
- Hashed passwords, optional 2FA and passkeys, audit logs on Scale and Enterprise.
- PII scrubbing on ingest; field-level redaction on Scale+ read/export paths.
Documents
- Privacy notice and Sub-processors
- security.txt for vulnerability reports
- DPA: available on request at hello@owlpane.com (Enterprise contracts)
Compliance
We do not display a SOC 2 badge until an independent Type II report exists. See our regulatory matrix in customer contracts.
Map trust.owlpane.com to this page (Cloudflare CNAME → marketing host, path /trust.html).