TRUST CENTER
Security and privacy, built in from day one.
Cygon is a software-only, privacy-by-design platform. This is how we protect your data and meet the standards your organization requires.
Certifications & compliance
We hold ourselves to recognized security and privacy standards, and maintain an ongoing program of audits and assessments.
ISO/IEC 27001:2022 Certified
SOC 2 Type II Compliant
GDPR Compliant
CCPA / CPRA Compliant
SOC 2 Type II is in the final stage of its examination. Fieldwork is complete and the report is expected shortly; it will be made available to customers and prospects under NDA.
Security by design
Architecture
- Software-only: no hardware, no endpoint agents
- Read-only integrations with your infrastructure by default
- Assume-breach design with least-privilege access
- Multi-tenant isolation across the processing pipeline
Data protection
- Encryption in transit and at rest
- SSO, role-based and location access control and audit logging
- Hosted on leading cloud infrastructure with regional data residency
- Regular penetration testing and vulnerability management
Privacy Privacy is engineered into the platform. We apply data minimization, collect only what is necessary, and align our practices with GDPR and CCPA/CPRA. See our Privacy Policy for details.
Documentation & reporting
Request security documentation Reports, security overview and related documentation are available to customers and prospects under NDA. Request documents → security@cygon.io
Report a security concern If you believe you’ve found a security issue, we want to hear from you. Our security team reviews every report. Contact security → security@cygon.io
