At Modus, protecting your data is our highest priority. We've built enterprise-grade security into every layer of our platform.
Multi-layered security approach to protect your data at every level
All data is encrypted using AES-256 encryption. Database backups and file storage are fully encrypted.
All data transmitted between your browser and our servers uses TLS 1.3 with strong cipher suites.
Role-based access control (RBAC) ensures team members only access the data they need.
Support for SSO, MFA, and OAuth 2.0. Secure session management with automatic timeout.
We follow secure SDLC practices with code reviews, automated testing, and vulnerability scanning.
Regular third-party penetration testing and vulnerability assessments to identify and fix issues.
Meeting the highest industry standards for data protection
Successfully audited for security, availability, and confidentiality controls.
AchievedInformation Security Management System certified.
CertifiedFull compliance with the EU General Data Protection Regulation.
CompliantCalifornia Consumer Privacy Act compliance for data rights and transparency.
CompliantHIPAA Security Rule controls successfully audited as part of our SOC 2 examination.
CompliantYour data belongs to you. Here's how we handle it.
You retain full ownership of your data. We never sell, share, or use your data for advertising purposes.
You control data retention policies. Upon account deletion, all data is permanently removed within 30 days.
Export your data at any time in standard formats. Your data is never locked in.
Your data is never used to train AI models. LLM queries are processed securely without storing your content.
Choose where your data is stored. We offer regional deployment options in US, EU, and APAC.
Comprehensive audit logging for all data access and system changes for compliance reporting.
Built on world-class infrastructure for maximum reliability
Hosted on Amazon Web Services with multi-region redundancy and automatic failover.
Automated backups every hour with point-in-time recovery up to 30 days.
Real-time monitoring and alerting with automated incident response procedures.
Enterprise-grade uptime guarantee backed by our service level agreement. View real-time status.
Common questions about our security and data handling practices
All data is encrypted using AES-256 encryption at rest and TLS 1.3 in transit. Database backups, file storage, and all API communications are fully encrypted.
No. Your data is never used to train AI models. LLM queries are processed securely without storing your content, and we maintain strict data isolation between customers.
Data is hosted on Amazon Web Services (AWS) with multi-region redundancy. We offer regional deployment options in the US, EU, and APAC to meet data residency requirements.
You can export your data at any time in standard formats. Upon account deletion, all data is permanently and securely removed from our systems within 30 days.
Yes. We support Single Sign-On (SSO) via SAML 2.0 and OAuth 2.0, along with Multi-Factor Authentication (MFA) for enhanced account security.
If you discover a security vulnerability, please report it responsibly to security@getmodus.com. We take all reports seriously and will respond promptly.
Our team is here to help with any questions about security, privacy, or compliance
Report vulnerabilities, request security documentation, or ask about our security practices.
security@getmodus.comQuestions about data handling, privacy policies, or data subject requests.
privacy@getmodus.comGDPR-related inquiries and data protection compliance matters.
dpo@getmodus.comTechnical assistance, account help, and general product support.
support@getmodus.comSales, partnerships, and all other business inquiries.
contact@getmodus.comPrivacy policy, terms of service, and other legal documentation.
View Documents