Security
How Single Origin protects your data, and the audits behind it.
Single Origin's Security and Privacy teams set policies and controls, monitor compliance with those controls, and prove our security and compliance to third-party auditors.
Data protection
Data at rest
All datastores with customer data, and all S3 buckets, are encrypted at rest.
Data in transit
Single Origin uses TLS 1.2 or higher everywhere data travels over potentially insecure networks.
Secret management
Encryption keys are managed with AWS Key Management Service (KMS).
Product security
Single Origin runs vulnerability scanning at key stages of our Secure Development Lifecycle (SDLC):
- Static analysis (SAST) of code during pull requests and on an ongoing basis
- Malicious dependency scanning, to keep malware out of our software supply chain
- Network vulnerability scanning on a periodic basis
Frameworks
SOC 2 Type 2
Single Origin received SOC 2 Type 2 certification in October 2024. To get the full report, email [email protected].
Penetration test
Single Origin received the approval of a penetration test conducted by Cacilian in December 2025. To get the full report, email [email protected].
Updated 6 days ago