SOC 2 Type II
Scape holds a SOC 2 Type II attestation. Our security controls are audited by an independent third party annually.
Security
Security isn't a feature at Scape, it's the architecture. Your data is encrypted per user behind split credentials that no single person can access alone, processed only in the EU, and never used to train AI models. Independently audited every year.
View Trust CenterGDPR
Our processing of personal data complies with the GDPR. Customer data never leaves the EU: hosting, database, AI inference, and compute all run in Europe.
ISO 27001
Scape is certified to ISO 27001:2022, the international standard for information security management. Our certificate is publicly available in the Trust Center.
No foundation model training
Your data is never used to train AI models, not by us and not by our AI sub-processors, who are contractually prohibited from doing so.
Data encryption
All data is encrypted in transit (TLS) and at rest (AES-256), with encryption applied per user. Decryption keys are held in Google Cloud KMS behind split credentials, so no single person can access your data alone.
CASA Tier 2
Independently assessed by TAC Security under CASA, the Cloud Application Security Assessment framework for Google OAuth restricted scopes. The 2026 reassessment is complete, and Scape is revalidated annually.
Reports
SOC 2 Type II
Our latest SOC 2 Type II report, covering the design and operating effectiveness of our security controls over time. Available under NDA.
Request reportISO 27001
Our ISO 27001:2022 certificate, issued following an independent audit of our information security management system.
Request reportGDPR
Documentation of our GDPR compliance, including our Data Processing Agreement and current sub-processor list.
Request reportCASA Tier 2
Details of our annual CASA assessment, performed by TAC Security for Google OAuth restricted scopes. Supporting evidence is available on request.
View detailsFrequent Questions
Answers to what security teams ask us most. For anything else, our security team reads every email.
Contact Us