Your customer data, protected by design
Ooperon runs on the same data your revenue depends on. We treat its security as a first-class part of the product, not an afterthought.
Encryption everywhere
Data is encrypted in transit with TLS 1.2+ and at rest with industry-standard AES-256. Secrets and credentials are stored in a managed vault, never in plaintext.
Least-privilege access
Access to production is limited to the people who need it, scoped by role, and logged. Passwords are stored only as salted hashes — we can never see them.
Hardened infrastructure
We run on reputable cloud providers with network isolation, managed patching, and separation between environments. Each workspace's data is logically isolated.
Monitoring & logging
We continuously monitor for anomalies and keep audit logs of sensitive actions so we can detect, investigate, and respond to issues quickly.
Backups & resilience
Databases are backed up regularly with point-in-time recovery, so your data survives failures and can be restored when it matters.
Vetted subprocessors
Every third party that touches your data is bound by contract to protect it and processes it only to provide their service to us. A subprocessor list is available on request.
Privacy & compliance
Security and privacy go together. We build the platform to help you meet your obligations under laws like the GDPR and CCPA/CPRA, and we act as your data processor for the customer data you run through it.
Data Processing Addendum
Available for customers who need one to cover their processing of personal data.
Data residency & deletion
Customer content is deleted or anonymized within 90 days of account termination, or sooner on request.
Incident response
We notify affected customers promptly of security incidents that impact their data.
Report a vulnerability
We welcome reports from security researchers. If you believe you have found a vulnerability, tell us before disclosing it publicly and give us reasonable time to fix it. We will not pursue legal action against good-faith research that respects our users’ privacy.
Email our security teamcontact@ooperon.com