Security you can audit, not just read about.
You give a security platform access to your source code, pipelines and production. Here is what backs that trust, and how to get the evidence for your own review.
Certifications
SOC 2 Type II
Independent audit of our security controls over time. Report available under NDA.
ISO/IEC 27001
Certified information security management system. Certificate available on request.
To request the SOC 2 report or ISO certificate, email [email protected] from your company address. We share reports under NDA.
How we handle your data
Your code and data stay yours
We process customer data only on your documented instructions under our agreement, including a data processing agreement where required. We never use it to train general-purpose AI models.
Self-hosted and air-gapped
O3 can run entirely inside your infrastructure, including on-premises and air-gapped environments. In those deployments O3 does not receive, collect or access the data the product handles.
Safeguards
Encryption, access controls and monitoring appropriate to the sensitivity of the data, with the same requirements contractually applied to our service providers.
Breach notification
If a personal data breach affects your information, we notify you and the relevant authorities as required by law and our contractual commitments.
Company and policies
O3 Security Inc. is the parent company. Our Indian operating subsidiary is MutexLock Technologies Private Limited, which operates as O3 Security.