Trust Center
Security & Compliance
Transparency into how we protect your data, maintain compliance, and secure our infrastructure.
Infrastructure
Built on Google Cloud
Enterprise-grade infrastructure with certifications trusted by the world's most regulated industries.
All Hail Sentinel infrastructure runs exclusively on Google Cloud Platform, which holds SOC 2 Type II, ISO 27001, ISO 27017, ISO 27018, PCI DSS, and CSA STAR certifications.
Your data never leaves United States infrastructure. Every service, database, and processing pipeline operates within US regions with strict data residency controls enforced at the infrastructure level via Terraform.
Our infrastructure-as-code approach ensures every resource is version-controlled, auditable, and reproducible. Security scanning with TFSec runs on every deployment.
Data Flow
How Your Data Flows
Every step encrypted, authenticated, and audited.
Hail Sentinel Platform
Encrypted processing, authenticated access, audited operations
Encrypted Everywhere
AES-256 at rest, TLS 1.3 in transit. API keys SHA-256 hashed. Webhook payloads HMAC-SHA256 signed.
Access Controlled
Role-based permissions. Scope-based API keys. Device attestation via App Check. Rate limiting on all endpoints.
Continuously Audited
BigQuery and Cloud Storage audit logs. Structured request logging. Real-time monitoring with automated alerts.
Compliance
Compliance Framework
Meeting the standards your legal and security teams require.
GDPR
EU General Data Protection Regulation. Legal bases documented, DPA available, 72-hour breach notification, data subject rights supported.
CCPA / CPRA
California Consumer Privacy Act. Right to know, delete, and opt-out. 12-month disclosure. Non-discrimination policy.
CAN-SPAM
Email compliance with unsubscribe in all marketing emails. Physical address included in every message.
ePrivacy
Cookie consent banner with opt-in/opt-out. Analytics only loaded after explicit user consent.
OWASP Top 10
CSP headers, SSRF protection, input validation, parameterized queries, secure authentication patterns.
App Store Compliance
Apple App Store and Google Play guidelines. Account deletion, privacy labels, signed binaries.
Data Retention
Data Retention & Handling
Clear policies for how long we store your data and why.
Data deletion available on request per GDPR Article 17 and CCPA. Contact privacy@hailsentinel.com.
Subprocessors
Our Subprocessors
We carefully vet every third party that processes your data.