Your data is your business. Here is how we protect it.
Encryption
TLS 1.3 in transit, AES-256 at rest, keys rotated every 90 days.
Access control
SSO, role-based permissions and full audit logs on every plan.
Compliance
SOC 2 Type II, ISO 27001 and GDPR-ready data processing agreements.
Frequently asked
Where is data stored?
Frankfurt by default. Dedicated regions are available on Enterprise.
Do you run penetration tests?
Yes, twice a year by independent firms. Summaries are available under NDA.
How do I report a vulnerability?
Email security@marshway.example. We acknowledge within one business day.