Security & Compliance

AWEsome Numbers is committed to protecting the confidentiality, integrity, and availability of customer data.

Privacy Compliance

  • PIPEDA-aligned privacy program
  • Published Privacy Policy, AUP, and No-PHI policy

Cloud Infrastructure

  • AWS: SOC 1, SOC 2 Type II, ISO 27001/27017/27018
  • Supabase: SOC 2 Type II
  • Vercel: Industry-standard security controls

Security Practices

  • Encryption at rest and in transit
  • Access control and audit logging
  • Secure backup and disaster recovery

Shared Responsibility Model

Infrastructure providers secure the cloud.
Awesome Numbers secures the application, data, and access controls.

SOC 2 CONTROL SUMMARY 

SOC 2-Aligned Control Summary

 

SOC 2 Category RiskGATOR Controls
Security RBAC, encryption, audit logs
Availability Redundant cloud infrastructure
Confidentiality Data segregation, access controls
Processing Integrity Controlled ingestion, validation
Privacy Data minimization, PIPEDA compliance

Note: AWEsome Numbers leverages SOC 2 Type II-certified providers (AWS, Supabase) and implements complementary controls.