Compliance & Data Protection
DevLyTicks is committed to maintaining the highest standards of security, privacy, and compliance to protect your data.
We understand that compliance is critical for modern businesses. DevLyTicks is built with security and privacy at its core, adhering to industry-leading standards and regulations.
Our compliance program is continuously evolving to meet new regulations and customer requirements. We work with independent auditors to verify our controls and maintain certifications.
SOC 2 Type II
We are actively working towards SOC 2 Type II certification. Our security controls are being independently audited to verify our commitment to data security, availability, and confidentiality.
GDPR Compliance
We comply with the EU General Data Protection Regulation (GDPR). We provide data processing agreements, support data subject rights, and maintain transparent data handling practices.
CCPA Compliance
We adhere to the California Consumer Privacy Act (CCPA) requirements, providing California residents with rights to access, delete, and opt-out of the sale of their personal information.
HIPAA
HIPAA compliance is on our roadmap for organizations in healthcare sectors. Contact us if this is a requirement for your organization.
Encryption at Rest and in Transit
All data is encrypted using AES-256 encryption at rest and TLS 1.3 in transit.
Access Controls
Role-based access control (RBAC) and multi-factor authentication (MFA) for all user accounts.
Data Residency
Choose where your data is stored with support for multiple geographic regions.
Regular Security Audits
Independent third-party security audits and penetration testing conducted annually.
Incident Response
Documented incident response procedures and 24/7 security monitoring.
Data Backup & Recovery
Automated daily backups with point-in-time recovery capabilities.
While we provide a secure and compliant platform, there are responsibilities that remain with you as our customer:
- •Configure appropriate access controls for your team members
- •Maintain secure authentication practices (strong passwords, MFA)
- •Classify and handle sensitive data according to your organization's policies
- •Regularly review audit logs and access permissions
- •Report any security concerns or incidents to our team immediately
We provide the following compliance documentation to enterprise customers:
- Data Processing Agreement (DPA)
- Business Associate Agreement (BAA) - Coming Soon
- Security Questionnaire Responses
- SOC 2 Report - In Progress
Compliance is an ongoing commitment. We continuously update our security practices and certifications to meet evolving standards and regulations.
For the most up-to-date information about our compliance status or specific compliance questions, please contact our security team at [email protected].
On This Page
Related Documentation
Security Team
Have compliance questions or security concerns?
Contact Security Team