SOC 2 Type II. GDPR. HIPAA-eligible. SAML SSO. Encryption everywhere. A 24/7 on-call rotation staffed by engineers, not a script. And a bug bounty paying out within the week.
Every byte encrypted at rest and in transit. Customer-managed keys on Scale plans.
SSO, SCIM provisioning, granular roles, audit trail. Every action your team takes is logged.
Multi-region replication, point-in-time restore, drilled DR plans, on-call engineers 24/7.
Independent audits, structured vendor program, public sub-processor list, transparency reports.
No single layer protects your data. A request from your browser passes through six independent control points — each operated by a different system, each logged, each tested. A breach of one doesn't compromise the others.
We publish the whitepaper on this architecture, with threat models and red-team findings, on request. Email security@clientlink.io.
Default for North American customers. AWS Virginia and Oregon, active-active across three AZs each. CCPA-ready.
AWS Frankfurt and Ireland. Data and metadata stay in-region. SCCs in place. Default for EU/UK customers on Growth+.
AWS Sydney. Required for some APAC public-sector customers and available on Scale by default.
Our bug bounty has been live on HackerOne since 2022. We triage every report within 24 hours, fix critical findings within 72, and pay out within a week of validation. We don't threaten researchers, we don't gag them, and we publicly thank everyone whose report led to a fix.
Report bugs at hackerone.com/clientlink or, if you'd rather skip the platform, directly to security@clientlink.io using our PGP key.
We pre-fill security questionnaires, hop on calls with your CISO, and sign just about anything reasonable. Most reviews wrap in a week.
