// Security

Built secure
from the ground up.

Your data never leaves our encrypted perimeter without authorization. Outpilot is built on strict security practices, continuous monitoring, and independent audits.

99.99%

Uptime SLA

AES-256

Encryption standard

SOC 2

Type II certified

< 1hr

Incident response

// Security pillars

Six layers of protection.

S01

Data Encryption

All data encrypted in transit via TLS 1.3 and at rest via AES-256. API keys and credentials are hashed and vaulted — never stored in plaintext.

S02

Access Control

Strict role-based access control (RBAC), MFA enforced for all employees, and least-privilege principles applied at every layer.

S03

Secure Infrastructure

Hosted on AWS inside isolated Virtual Private Clouds (VPCs). Continuous vulnerability scanning runs 24/7 across all services.

S04

Monitoring & Logging

Real-time anomaly detection and full audit trails on every data access event. Alerts fire within 60 seconds of a policy violation.

S05

Incident Response

Documented IR playbook tested quarterly. Critical incidents acknowledged within 1 hour, customers notified within 24 hours.

S06

Vendor Risk Management

All third-party vendors undergo security review before integration. Contracts enforce data processing agreements and deletion timelines.

// Compliance & audits

Independently verified.

SOC 2 Type II Certified

Audit report available under NDA

Active

GDPR & CCPA Compliant

Full DPA available on request

Active

Annual Third-Party Pen Testing

Conducted by certified ethical hackers

Active

Automated Dependency Scanning

Runs on every code push

Active

Continuous Infrastructure Monitoring

24/7 alerting pipeline

Active

Data Residency Controls

EU & US regions available

Active

// Enterprise security

Need our SOC 2 report?

We provide our full SOC 2 Type II report, security questionnaire responses, and penetration test executive summaries under NDA. Our security team responds within one business day.