SECURITY CENTERSECURITY CENTER
Xano Security and Compliance
Xano is dedicated to the safeguarding of customer data. Security is placed at the forefront of our product strategy, emphasizing its utmost importance. In constructing our platform, we adhere to the industry's finest practices, ensuring it is robust, scalable, and fortified against potential threats. Continuous vigilance and periodic evaluations of our program are conducted to guarantee that it aligns with, or surpasses, the standards of compliance and regulatory obligations.
Jacques Antikadjian: Co-Founder & CSO
Compliance
Compliant with the highest software and security standards
Pending
PendingDocumentation
Product Security
- Data Security
- Multi-Factor Authentication
- Audit Logging
- Role-Based Access Control
Reports
- PCI DSS (ASV Network Scan)
- SOC 3 Report
- Pentest Report
- Network Diagram
Access Control
- Data Access
- Logging
- Password Security
App Security
- Code Analysis
- Software Development Lifecycle
- Vulnerability & Patch Management
Data Privacy
- Cookies
- Geolocation Privacy
- Employee Privacy Training
Data Security
- Access Monitoring
- Encryption-in-transit
- Backups Enabled
- Data Erasure
Endpoint Security
- Endpoint Detection & Response (EDR)
Self-Assessments
We are working on our security compliance. We can provide completed questionnaires upon request.
Security Grades
We are constantly monitoring the security of our website. We will post our grades from public security rating agencies when they become available.
ESG
- Carbon Neutrality
- Anti-Bribery and Corruption
- Environmental Stewardship
- Whistleblowing Program
Infrastructure
- Anti-DDoS
- Google Cloud Platform
Corporate Security
- Penetration Testing
- Internal Assessments
- Email Protection
- Internal SSO
Legal
- Data Processing Addendum (DPA)
- Subprocessors
- Terms & Conditions
- Privacy Notice
Network Security
- Firewall
Policies
- Encryption Policy
- Password Policy
- Next Generation Antivirus (NGAV) Policy
- Government Data Request Policy
Risk Profile
- Recovery Time Objective
- Critical Dependence
- Data Access Level
- Hosting
