Security

Built for the audit.

Exactly how we protect your data, and how you stay in control.

SOC 2 Type II

GDPR

SSO and SCIM

No training on your data

Data flow

How your data moves.

Encrypted, scoped and logged at every hop.

01 · Source

Your tools

Slack, email, Jira and others, connected with OAuth scopes you choose.

OAuth

Scoped

02 · Agent

Metrivo agent

TLS 1.3 in transit, AES-256 at rest. Isolated per workspace.

TLS 1.3

AES-256

03 · Record

Your audit log

Every read and action recorded. Export anytime for SOC 2 evidence.

Exportable

SOC 2

Controls

You set the limits.

Least-privilege scopes

Each integration requests only the permissions listed on its page. Narrow them anytime.

Per integration

Revocable

Human approval thresholds

Set amounts, systems and actions that always require a person to approve.

Amounts

Systems

Full audit trail

Who, what and why for every action, retained for as long as your plan allows.

Exportable

SOC 2 evidence

Least-privilege scopes

Each integration requests only the permissions listed on its page. Narrow them anytime.

Per integration

Revocable

Human approval thresholds

Set amounts, systems and actions that always require a person to approve.

Amounts

Systems

Full audit trail

Who, what and why for every action, retained for as long as your plan allows.

Exportable

SOC 2 evidence

SSO, SCIM and roles

SAML SSO, automated provisioning and role-based access for admins and approvers.

SAML SSO

SCIM

Data residency

Host your workspace in the US or EU. Data never leaves the region you choose.

No training on your data

Customer content is never used to train models, ours or any provider’s.

Never trained

Deletable

SSO, SCIM and roles

SAML SSO, automated provisioning and role-based access for admins and approvers.

SAML SSO

SCIM

Data residency

Host your workspace in the US or EU. Data never leaves the region you choose.

No training on your data

Customer content is never used to train models, ours or any provider’s.

Never trained

Deletable

Assurance

Checked by people who aren’t us.

Uptime

99.95%

uptime

Uptime, last 12 months

Measured independently and published on our status page.

Response

< 4h

SLA

Incident response

A named engineer on any security incident within four hours.

Testing

2×

a year

Penetration tests

Run by an outside firm. Summaries are available under NDA.

Subprocessors

Who else touches your data.

The vendors that process data on our behalf.

Sample list. Replace with your own vendors.

Untangle your ops this week.

Most teams are live in an afternoon. The first 200 runs are on us.

Start free

Talk to sales

Download this template

Metrivo