Rollstack encrypts data at rest and in transit for all of our customers. We use Advanced Encryption Standard (AES) for sensitive data encryption, in line with industry best practices.

Rollstack is enrolled with Vanta to enforce and monitor SOC 2 security standards and best practices. We also make sure that all our software providers are SOC 2 compliant.
We use high-quality static analysis tooling provided by GitHub Advanced Security such as Dependabot to secure our product at every step of the development process.

We deploy our application using containers run on AWS and Fly managed services, both of which are SOC II compliant.