Security at NoHeck
Security and privacy are product features, not afterthoughts.
We focus on access control, tenant separation, and secure operations.
Data Protection
All data is encrypted in transit via TLS 1.2+ and at rest using industry-standard AES-256 encryption. We minimize data collection to only what is needed to provide the service.
Key Practice: We maintain backups to support recovery, but strict tenant isolation prevents data leakage.
Access Control
NoHeck is built on a robust Role-Based Access Control (RBAC) model. Administrative functions are restricted to Owners and Managers and are logged.
Key Practice:Admin capabilities are built into the app logic, not a separate "superuser" portal.
Need a Security Package?
For Enterprise teams, we can share our SOC 2 Type II report (Planned), penetration test summaries, and policy documents under NDA.
Request Security PackageSubprocessors
We use a limited set of trusted service providers:
- AWS (infrastructure)
- Cloudflare (CDN / DNS)
- Sentry (error monitoring)
- Resend (email delivery)
Incident Response
We maintain a process to detect, respond, and recover from security events.
Report Issue →