Trust Center

Security is in our DNA

At Modus, protecting your data is our highest priority. We've built enterprise-grade security into every layer of our platform.

AES-256 Encryption
TLS 1.3 in Transit
SOC2 Type II Certified
99.9% Uptime SLA

Security Practices

Multi-layered security approach to protect your data at every level

Encryption at Rest

All data is encrypted using AES-256 encryption. Database backups and file storage are fully encrypted.

Encryption in Transit

All data transmitted between your browser and our servers uses TLS 1.3 with strong cipher suites.

Access Control

Role-based access control (RBAC) ensures team members only access the data they need.

Authentication

Support for SSO, MFA, and OAuth 2.0. Secure session management with automatic timeout.

Secure Development

We follow secure SDLC practices with code reviews, automated testing, and vulnerability scanning.

Penetration Testing

Regular third-party penetration testing and vulnerability assessments to identify and fix issues.

Compliance & Certifications

Meeting the highest industry standards for data protection

SOC 2 Type II

Successfully audited for security, availability, and confidentiality controls.

Achieved

ISO/IEC 27001:2022

Information Security Management System certified.

Certified

GDPR

Full compliance with the EU General Data Protection Regulation.

Compliant

CCPA

California Consumer Privacy Act compliance for data rights and transparency.

Compliant

HIPAA

HIPAA Security Rule controls successfully audited as part of our SOC 2 examination.

Compliant

Privacy & Data Handling

Your data belongs to you. Here's how we handle it.

Data Ownership

You retain full ownership of your data. We never sell, share, or use your data for advertising purposes.

Data Retention

You control data retention policies. Upon account deletion, all data is permanently removed within 30 days.

Data Portability

Export your data at any time in standard formats. Your data is never locked in.

AI & Your Data

Your data is never used to train AI models. LLM queries are processed securely without storing your content.

Data Residency

Choose where your data is stored. We offer regional deployment options in US, EU, and APAC.

Audit Logs

Comprehensive audit logging for all data access and system changes for compliance reporting.

Infrastructure & Reliability

Built on world-class infrastructure for maximum reliability

AWS Infrastructure

Hosted on Amazon Web Services with multi-region redundancy and automatic failover.

Continuous Backup

Automated backups every hour with point-in-time recovery up to 30 days.

24/7 Monitoring

Real-time monitoring and alerting with automated incident response procedures.

99.9% Uptime SLA

Enterprise-grade uptime guarantee backed by our service level agreement. View real-time status.

Frequently Asked Questions

Common questions about our security and data handling practices

All data is encrypted using AES-256 encryption at rest and TLS 1.3 in transit. Database backups, file storage, and all API communications are fully encrypted.

No. Your data is never used to train AI models. LLM queries are processed securely without storing your content, and we maintain strict data isolation between customers.

Data is hosted on Amazon Web Services (AWS) with multi-region redundancy. We offer regional deployment options in the US, EU, and APAC to meet data residency requirements.

You can export your data at any time in standard formats. Upon account deletion, all data is permanently and securely removed from our systems within 30 days.

Yes. We support Single Sign-On (SSO) via SAML 2.0 and OAuth 2.0, along with Multi-Factor Authentication (MFA) for enhanced account security.

If you discover a security vulnerability, please report it responsibly to security@getmodus.com. We take all reports seriously and will respond promptly.

Get in Touch

Our team is here to help with any questions about security, privacy, or compliance