Acme Ltd

Security, privacy & compliance at Acme

We take the security of our customers’ data seriously. This page summarises our certifications, policies and subprocessors, and lets you request the documents your team needs for vendor review.

Compliance & certifications

ISO/IEC 27001
Certified
Information security management system, certified by an accredited body.
SOC 2 Type II
Compliant
Independent audit of security, availability and confidentiality controls.
GDPR
Continuous
EU data protection — DPA available, EU data residency.
ISO/IEC 42001
In progress
AI management system — implementation underway.

Documents & resources

Security Whitepaper
How we protect customer data.
Overview
Public
Sub-processor list
Current third parties and their purpose.
Privacy
Public
SOC 2 Type II report
Full audit report — NDA required.
Audit
NDA required
Penetration test summary
Latest third-party pentest summary.
Audit
On request

Gated documents are available on request — contact security@acme.example. (Self-service request & NDA access is coming soon.)

Subprocessors

NamePurposeLocation
Hetzner Online GmbH Cloud hosting Germany / Finland (EU)
Resend Transactional email EU / US
Stripe Payments EU / US

Security FAQ

Where is our data stored?

All customer data is hosted in the EU (Germany/Finland) and never leaves the EU without your instruction.

Do you encrypt data?

Yes — data is encrypted in transit (TLS 1.2+) and at rest. Backups are encrypted and stored in the EU.

How do we report a vulnerability?

Email security@acme.example. We acknowledge reports within one business day.