Skip to main content

Security

The security and privacy of customer data is a priority for us. Below is an overview of the most important mechanisms.

Scope

This page describes the mechanisms in a customer-safe way. A detailed technical document (IT due-diligence) is available on request during the purchasing process.

Data isolation (multi-tenant)​

  • The platform is multi-tenant with multi-workspace. Each customer's (tenant) and each workspace's data is isolated.
  • Every request verifies both tenant_id and workspace_id — one workspace's data is not visible in another, even within the same tenant.

Data in the European Union​

  • The infrastructure runs in the EU. Data is stored in EU-based data centers.
  • Additional regional options are available for Enterprise customers.

Encryption​

  • Traffic encrypted in transit (TLS/HTTPS).
  • Integration credentials and OAuth tokens are stored encrypted.

Access control​

  • Roles: superadmin, client_admin, member, and — in Enterprise — custom RBAC.
  • MFA and SSO (OIDC / SAML) options for Enterprise plans.
  • Full audit log of operations (SOC 2 readiness).

Continuity and resilience​

  • Regular backups.
  • Monitoring and observability (metrics, logs, alerts).

Reporting security issues​

Report a suspected vulnerability or incident to the address specified in your contract/contact with the GEO Platform team.