Security at Aimdoc

We take the protection of your data seriously. Our program is built on industry-standard controls, regular audits, and a culture of security.

SOC 2

SOC 2 Type II certified.

GDPR

We practice GDPR compliance with standard DPA and data subject rights.

Trust Center

Access policies, reports, and FAQs in our trust portal.

Program overview

Aimdoc is a B2B SaaS platform. Our security program covers organizational, technical, and operational controls aligned to SOC 2 and GDPR. We continuously improve our controls as we scale.

  • Security training and background checks for employees
  • Least-privilege access and role-based authorization
  • Change management and peer review for production changes
  • Vulnerability management and regular dependency updates
  • Business continuity and incident response procedures

Data protection

  • Encryption in transit using TLS 1.2+ and at rest with modern ciphers
  • Segregated production environment and secure secrets management
  • Backups with retention and regular restore testing
  • Audit logging and monitoring of critical systems
  • Data minimization and customer data deletion upon request

Compliance

We maintain SOC 2 Type II certification. We support GDPR compliance, including data processing agreements (DPA), data subject access requests (DSARs), and international transfer mechanisms where applicable.

For additional details, request access to our Trust Center.