Security & Compliance
AWEsome Numbers is committed to protecting the confidentiality, integrity, and availability of customer data.
Privacy Compliance
- PIPEDA-aligned privacy program
- Published Privacy Policy, AUP, and No-PHI policy
Cloud Infrastructure
- AWS: SOC 1, SOC 2 Type II, ISO 27001/27017/27018
- Supabase: SOC 2 Type II
- Vercel: Industry-standard security controls
Security Practices
- Encryption at rest and in transit
- Access control and audit logging
- Secure backup and disaster recovery
Shared Responsibility Model
Infrastructure providers secure the cloud.
Awesome Numbers secures the application, data, and access controls.
SOC 2 CONTROL SUMMARY
SOC 2-Aligned Control Summary
| SOC 2 Category | RiskGATOR Controls |
| Security | RBAC, encryption, audit logs |
| Availability | Redundant cloud infrastructure |
| Confidentiality | Data segregation, access controls |
| Processing Integrity | Controlled ingestion, validation |
| Privacy | Data minimization, PIPEDA compliance |
Note: AWEsome Numbers leverages SOC 2 Type II-certified providers (AWS, Supabase) and implements complementary controls.
