Maqetin has a SOC 2 audit underway.
The audit is underway and there is no report yet. This page says where it stands and lists the controls in place today.
Where the audit stands.
- Status
- In progress
- Report
- Not available yet
- Questionnaires
- Send yours to security@maqetin.com, and Maqetin answers in writing.
- Contract terms
- The data processing agreement sets out the security measures Maqetin commits to.
Controls in place today.
These are the measures of the Security page and of clause 5 of the data processing agreement.
- Workspaces kept apart
- Every query is scoped to one workspace, and a test suite that tries to read across workspaces runs on every release.
- Encryption in transit
- Data travels encrypted between your apps, Maqetin's systems and its subprocessors.
- Encrypted backups
- Databases are backed up every day, and the backups are encrypted.
- Staff access recorded
- Staff access needs a reason, shows a banner the whole time, and is written to the audit log.
- Secrets out of code
- Credentials live in a secrets manager and are loaded at start-up, never in code or images.
- Secret keys shown once
- At creation, and never again.
- Data kept in the EU
- Personal data is stored in the European Union.
- Deletion that reaches backups
- Deleted data ages out of backups within 35 days.