Security at Markprompt
Learn how Markprompt handles security.
Markprompt is SOC 2 Type II certified and GDPR compliant. Our SOC 2 and GDPR reports are available on demand to Enterprise customers.
All customer data is encrypted at rest with AES-256 and in transit via TLS. Sensitive information like chat interactions are encrypted before they are stored in the database.
Markprompt has a 0-day retention agreement with OpenAI, so no data is stored on OpenAI servers after a request has completed.
Markprompt has a 99.9% server uptime, and quickly communicates in case of downtime or other events impacting the availability of the service.
Markprompt works with industry experts to conduct penetration tests on a regular basis. Markprompt domains are continuously scanned for vulnerabilities.
Data security incidents or breaches receive prioritized attention, undergo comprehensive investigation, and are subjected to a well-defined incident management process to ensure proper handling.
All customer data is backed up on a daily basis. Backups are persisted for 30 days.
Every employee at Markprompt undergoes annual security awareness training with an external provider.