Certifications & Compliance
Our current compliance posture
SOC 2 Type II
In ProgressSecurity, availability, and confidentiality controls audit.
ISO 27001
In ProgressInformation security management system certification.
GDPR
CompliantEU General Data Protection Regulation compliance.
Australian Privacy Principles
CompliantFull compliance with the Australian Privacy Act 1988.
HIPAA-ready
AvailableBusiness Associate Agreement available for US health customers.
Essential Eight
AlignedAligned with the ACSC Essential Eight mitigation strategies.
WCAG 2.2 AA
CompliantWeb Content Accessibility Guidelines compliance.
Security practices
AES-256 encryption at rest
TLS 1.3 in transit
Customer-managed keys (Enterprise White-Label)
Data residency selection: AU, EU, UK, US, CA
HMAC-signed webhooks with rotation
Audit logs retained 7 years on request
SIEM export via syslog / HTTPS
Penetration testing (annual)
Vulnerability disclosure programme
99.9% uptime SLA (Enterprise)
Data residency options
Selected at contract time. Data is stored and processed only in your chosen region.
Default region. Sydney/Melbourne.
Frankfurt. GDPR compliance.
London. Post-Brexit UK GDPR.
US-East. HIPAA-eligible.
Toronto. PIPEDA aligned.
Trust documents
Download for your vendor assessment, procurement, or legal review.
Service Status
Subscribe to status updates or view incident history at status.everlight.app