ISO 27001 certified
Independently audited and certified against ISO/IEC 27001:2022. The scope covers the development, operation and maintenance of the platform.
Security
Security and data protection.
Max Scale holds project material, the assessments derived from it, and the decisions that follow. This page summarises how that data is protected. The Trust Center holds the current detail.
The controls in place.
Data location
Customer data is stored and processed on Google Cloud in the EU. AI processing takes place in the EU.
Encryption
TLS 1.2 or higher in transit, AES-256 at rest.
Identity and access
SAML and OAuth single sign-on, SCIM provisioning, role-based access control, tenant isolation and audit logging. Single sign-on and SCIM come with the Enterprise plan.
Incident response
A documented and tested procedure covering classification, response, escalation and post-incident review, with defined ownership.
Model training
The default AI provider is contractually prohibited from using customer data to train or optimise its general models. The commitment is recorded in the Data Processing Agreement.
Trust Center
Sub-processors, certifications, security policies, and audit reports.
Open the Trust Center😎 Want to see me in action? Bring your data. I will show you exactly where you are and where to focus next.
Get a demo