SOC 2 Type II
Scape holds a SOC 2 Type II attestation. Our security controls are audited by an independent third party annually.
Security
Security isn't a feature at Scape, it's the architecture. Your data is encrypted per user and decrypted only to serve your requests, processed only in the EU, and never used to train AI models. Independently audited every year.
View Trust CenterGDPR
Our processing of personal data complies with the GDPR. Customer data never leaves the EU: hosting, database, AI inference, and compute all run in Europe.
ISO 27001
Scape is certified to ISO 27001:2022, the international standard for information security management. Our certificate is publicly available in the Trust Center.
No foundation model training
Your data is never used to train AI models, not by us and not by our AI sub-processors. All AI processing runs under contractual zero data retention agreements: LLM providers process your data to produce your result, return it, and store nothing.
Data encryption
All data is encrypted in transit (TLS) and at rest (AES-256-GCM), with encryption applied per user. Your data is decrypted only to serve your requests. Human access to keys is limited to an emergency break-glass account that no single person, including our founders, can unlock alone.
CASA Tier 2
Independently assessed by TAC Security under CASA, the Cloud Application Security Assessment framework for Google OAuth restricted scopes. The 2026 reassessment is complete, and Scape is revalidated annually.
Reports
SOC 2 Type II
Our latest SOC 2 Type II report, covering the design and operating effectiveness of our security controls over time. Available under NDA.
Request reportISO 27001
Our ISO 27001:2022 certificate, issued following an independent audit of our information security management system.
Request reportGDPR
Documentation of our GDPR compliance, including our Data Processing Agreement and current sub-processor list.
Request reportCASA Tier 2
Details of our annual CASA assessment, performed by TAC Security for Google OAuth restricted scopes. Supporting evidence is available on request.
View detailsFrequent Questions
Answers to what security teams ask us most. For anything else, our security team reads every email.
Contact Us