SKU Science

Security, safety
and privacy

Customer trust and data security are at the heart of everything we do. Your data is encrypted, hosted in the EU, and backed up around the clock. Only you decide who gets access.

AWS infrastructure
SSL end-to-end
Backups every 6 hours
SOC 2
TYPE II
SOC 2 Type II
Independently audited every year
GDPR
GDPR compliant
EU personal-data regulation
AWS
AWS infrastructure
ISO 27001-certified hosting
COMPLIANCE

Independently audited, certified, and compliant

The certifications and controls that let you plan your demand on SKU Science with complete confidence.

SOC
2
SOC 2 Type II

Service Organisation Controls (Type II) Trust Services Principles — covering security, availability and confidentiality. Audited annually by an independent third party.

AUDITED ANNUALLY
GDPR
GDPR compliant

Fully compliant with the EU General Data Protection Regulation for the handling of personal data.

EU REGULATION
AWS
AWS infrastructure

Hosted on Amazon Web Services in the European Union (Ireland), on ISO 27001-certified infrastructure.

ISO 27001 CERTIFIED
KEY FEATURES

Security, safety and privacy — by design

Three layers of protection, built in from day one.

Security

  • Encryption at rest

    All your data is encrypted at rest in the database.

  • Communications encryption

    Traffic between app, database and browser is encrypted (128-bit SSL, HTTPS).

  • Passwords & credentials

    Stored with a PBKDF (bcrypt). Two-factor authentication (2FA) available.

Safety

  • Hosted on AWS · EU

    The application runs on Amazon Web Services, with servers in the European Union (Ireland).

  • Failover & DR

    The database is replicated for a high quality of service.

  • Backups every 6 hours

    Your data is backed up on a rolling six-hour cycle.

Privacy

  • Policies

    A comprehensive set of security policies, updated frequently and shared with all employees.

  • Confidentiality

    Every employee contract includes a confidentiality agreement.

  • PCI obligations

    Card payments are handled by Stripe, which ensures PCI compliance.

  • Permissions & authentication

    Only the account owner can access their data. Support connects only via a temporary token you generate.

SECURITY QUESTIONS?

Found something? Get in touch

If you think you may have found a security vulnerability, please contact us, we'll respond quickly.

SKU Science
Privacy Overview

This website uses cookies so that we can provide you with the best user experience possible. Cookie information is stored in your browser and performs functions such as recognising you when you return to our website and helping our team to understand which sections of the website you find most interesting and useful.