Empathiq is committed to maintaining the highest security standards to protect your data. We run our Services on Supered.io, our official partner, which adheres to robust compliance and security frameworks, ensuring your information is safeguarded.

Security Standards

Compliance Frameworks

Supered.io, as our official partner, maintains compliance with SOC2 Type II, GDPR, and other relevant security standards. Their security practices are regularly audited and validated through third-party assessments.

Infrastructure and Hosting

Built on Reliable Infrastructure

Our application operates on Supered.io’s platform, which is built upon industry-leading providers, including Amazon Web Services (AWS), ensuring extensive data center and system security measures.

• AWS Security: AWS maintains audited security programs, physical and environmental protections, and robust disaster recovery plans validated by their SOC 2 Type II and ISO 27001 certifications.

• Private Networking: Data transfers between infrastructure components are conducted exclusively via secure, private networking. Sensitive databases or infrastructure components are not exposed to the public internet.

Data Protection

Encryption and Data Integrity

• In Transit: Data transferred between you and our Services is encrypted using HTTPS.

• At Rest: Data stored within our systems, including any files you upload, are encrypted at rest using methods supported by Supered.io and its infrastructure providers.

Our reliance on Supered.io ensures that rigorous measures are in place to secure your data.

Regular Updates

Supered.io’s infrastructure is updated regularly with the latest security patches. Their platform ensures firewall protections and automated updates to minimize vulnerabilities.

Logical Separation

Empathiq’s Services utilize a multi-tenant SaaS architecture managed through Supered.io. Data is logically separated to ensure that no cross-tenant data access occurs. User interfaces and APIs enforce tenant-specific restrictions to maintain data integrity.

Billing Information

We utilize Stripe for all payment processing. Stripe operates on a PCI-compliant network, ensuring that your card information is transmitted, stored, and processed securely. Empathiq does not store sensitive payment details directly.

Incident Reporting

If you notice any misuse, abuse, or potential exploits within our Services, or if you experience an incident, please report it immediately. Reach us at support@getempathiq.com to submit a report.

Empathiq remains committed to addressing and resolving security concerns promptly.