Our security commitment
At Definitely Real Company, security isn't an afterthought — it's a bullet point on our homepage. We implement multiple layers of protection to safeguard your data.
Certifications & compliance
- SOC 2 Type II — in progress (enthusiastically)
- ISO 27001 — on the roadmap
- GDPR compliant data handling
- CCPA ready
Report a vulnerability
If you discover a security issue, please report it responsibly to [email protected]. We appreciate responsible disclosure and will acknowledge reports within 48 hours.
Encryption
TLS 1.3 in transit, AES-256 at rest
Access Control
Role-based permissions, MFA enforced for all employees
Monitoring
24/7 automated threat detection and alerting
Backups
Daily encrypted backups with geo-redundancy
Audits
Annual third-party penetration testing