End-to-end encryption
AES-256 at rest, TLS 1.3 in transit. Backups encrypted daily.
TRUST IS BUILT
Security & Compliance
Cleavr is ISO 27001 certified. Your data is encrypted, hosted in Europe, and isolated per client.
ISO 27001:2022 CertifiedDATA PROTECTION
Security, in practice.
EU hosting
Data hosted exclusively in the European Union.
Per-client isolation
Multi-tenant architecture with Row Level Security. No data accessible by anyone.
Complete audit trail
Every action tracked with timestamp, author, and context. Logs retained 6 to 12 months.
A CLEAR FRAMEWORK
Compliance
ISO 27001
- Certification
- ISO 27001:2022
- Scope
- Cleavr platform & infrastructure
- Status
- Certified
GDPR
- Role
- Data processor (article 28)
- DPO
- Appointed and available
- Hosting
- European Union exclusively
- Rights guaranteed
- Access, rectification, portability, erasure
OUR ECOSYSTEM
Sub-processors
| Sub-processor | Purpose | Location | Certifications |
|---|---|---|---|
| AWS | Infrastructure & hosting | EU (Paris, Ireland, Frankfurt) | ISO 27001, SOC 2 |
| Vercel | Deployment & CDN | EU | ISO 27001, SOC 2 |
| Stripe | Payments | EU | PCI DSS, ISO 27001 |
| Brevo | Communications (email, SMS) | France | GDPR native |
| Slack | Internal notifications | EU | ISO 27001, SOC 2 |
Questions about security?
For any questions about security, compliance, or data protection, contact our team.