Security you can trust
Security and compliance for monitoring infrastructure. Your data is protected with TLS 1.3 in transit, AES-256 at rest, and strict access controls.
Built secure from the ground up
Security isn't an afterthought. It's the foundation. Every architectural decision prioritizes data protection, access control, and compliance.
From encrypted data at rest to detailed audit logs, we give you the tools and transparency to meet your security requirements.
Strict internal access controls
Team access to your monitoring data is limited and logged
Private by default
Minimal data collection, maximum privacy
Transparent practices
Clear policies, no surprises
You own your data
Export or delete anytime
Compliance & certifications
Meeting industry standards for security and data protection
SOC 2 Type II
Security and availability controls audit
GDPR Compliant
EU data protection compliance
ISO 27001
Information security management
HIPAA
Healthcare data compliance
Enterprise security features
Protect your monitoring data with strong security controls, available today for early access teams
End-to-end encryption
All data is encrypted in transit (TLS 1.3) and at rest (AES-256), with strict internal controls limiting who on our team can access it.
Security audits
Third-party penetration testing and security audits are planned as part of our SOC 2 Type II process. Vulnerability scanning runs on every deployment today.
SSO & SAML support (early access)
Enterprise single sign-on with Okta, Auth0, Azure AD, and custom SAML, available to early access teams.
2FA required
Two-factor authentication enforced for every account from day one. TOTP, SMS, and hardware key support.
Role-based access control
Granular permissions with custom roles. Principle of least privilege enforced across all resources.
Complete audit logs
Immutable audit trail of every action. Export logs for compliance and forensic analysis.
Infrastructure security
Reliable, resilient, and secure infrastructure
Multi-region redundancy
Data replicated across multiple geographic regions with automatic failover.
DDoS protection
Cloudflare Enterprise with advanced bot protection and rate limiting.
99.99% uptime SLA
Target SLA for general availability, with priority support during early access.
Automated backups
Continuous backup with point-in-time recovery up to 30 days.
Infrastructure Stack
HOSTING
- • AWS with multi-region
- • Kubernetes orchestration
- • Auto-scaling infrastructure
NETWORK
- • Cloudflare Enterprise
- • Private VPC networking
- • TLS 1.3 encryption
DATABASE
- • Encrypted at rest (AES-256)
- • Automated backups
- • Point-in-time recovery
Vulnerability disclosure
Security researchers: we appreciate your help in keeping upzero secure. If you discover a vulnerability, please report it responsibly.
Report a vulnerability
1. Email info@upzero.io with details
2. Include proof of concept (non-destructive)
3. Allow 90 days for remediation
4. We'll acknowledge within 48 hours
We do not currently offer a bug bounty program, but we recognize and appreciate responsible disclosures.
Security best practices
Help protect your account with these security recommendations:
Enable 2FA immediately
Use authenticator app for best security
Use SSO when available
Centralize authentication through your identity provider
Review API keys regularly
Rotate keys and revoke unused access
Monitor audit logs
Watch for unusual activity patterns
Use IP allowlists
Restrict API access to known networks
Our privacy commitment
We collect only what's necessary and never sell your data
What we collect
- • Account and billing information
- • Monitoring configuration and results
- • API usage and performance metrics
- • Security and audit logs
What we don't do
- • Sell your data to third parties
- • Track you across other websites
- • Use data for advertising
- • Share data without consent
Questions about security?
We're here to help. Whether you have questions about compliance, need a security questionnaire filled out, or want to discuss your requirements.