SOC 2 alignment

Controls aligned with the SOC 2 trust services criteria. We are not SOC 2 attested.

Last reviewed on 2026-09-19.

GlobalAligned with, not attested.

What we do

Security: sandbox egress allow-list, service-side encryption at rest, signed evidence chain.
Availability: incidents caused by the service are opened automatically and notified to the platform owner.
Confidentiality: no source code retention; scripts disclosed only to identified subscribers.

This page describes our practices. It is not legal advice, not an audit report and not a statement of conformity with any framework.