Your customer data, protected by design
Ooperon runs on the same data your revenue depends on. We treat its security as a first-class part of the product, not an afterthought.
Encryption everywhere
Data is encrypted in transit and at rest. Sensitive credentials and secrets are encrypted before they are stored, never kept in plaintext.
Least-privilege access
Access to production is limited to the people who need it, scoped by role, and logged. Passwords are stored only as salted hashes — we can never see them.
Hardened infrastructure
We run on reputable cloud providers with network isolation, managed patching, and separation between environments. Each workspace's data is logically isolated.
Monitoring & logging
We monitor our systems and keep logs so we can detect, investigate, and respond to issues.
Backups & resilience
Databases are backed up regularly with point-in-time recovery, so your data survives failures and can be restored when it matters.
Vetted subprocessors
Every third party that touches your data is bound by contract to protect it and processes it only to provide their service to us. A subprocessor list is available on request.
Privacy & compliance
Security and privacy go together. We build the platform to help you meet your obligations under laws like the GDPR and CCPA/CPRA, and we act as your data processor for the customer data you run through it.
Data Processing Addendum
Available for customers who need one to cover their processing of personal data.
Data deletion
We delete customer content after account termination and honor data deletion requests.
Incident response
We notify affected customers promptly of security incidents that impact their data.
Report a vulnerability
We welcome reports from security researchers. If you believe you have found a vulnerability, tell us before disclosing it publicly and give us reasonable time to fix it. We will not pursue legal action against good-faith research that respects our users’ privacy.
Email our security teamcontact@ooperon.com