SECURITY CENTERSECURITY CENTER
Xano Security and Compliance
Xano is dedicated to the safeguarding of customer data. Security is placed at the forefront of our product strategy, emphasizing its utmost importance. In constructing our platform, we adhere to the industry's finest practices, ensuring it is robust, scalable, and fortified against potential threats. Continuous vigilance and periodic evaluations of our program are conducted to guarantee that it aligns with, or surpasses, the standards of compliance and regulatory obligations.
Jacques Antikadjian: Co-Founder & CSO
Compliance
Compliant with the highest software and security standards
Pending
PendingPending
PendingDocumentation
Reports
- SOC 3 Report
- Network Diagram
- PCI DSS (ASV Network Scan)
- Pentest Report
Access Control
- Logging
- Data Access
- Password Security
App Security
- Software Development Lifecycle
- Code Analysis
- Vulnerability & Patch Management
Data Privacy
- Geolocation Privacy
- Employee Privacy Training
- Cookies
Data Security
- Backups Enabled
- Encryption-at-rest
- Access Monitoring
- Data Erasure
Endpoint Security
- Endpoint Detection & Response (EDR)
Product Security
- Multi-Factor Authentication
- Data Security
- Audit Logging
- SSO Support
Self-Assessments
We are working on our security compliance. We can provide completed questionnaires upon request.
Security Grades
We are constantly monitoring the security of our website. We will post our grades from public security rating agencies when they become available.
ESG
- Fair Labor
- Carbon Neutrality
- Whistleblowing Program
- Diversity, Equity, and Inclusion
Infrastructure
- Anti-DDoS
- Google Cloud Platform
Corporate Security
- Internal SSO
- Penetration Testing
- Internal Assessments
- Asset Management Practices
Legal
- Privacy Notice
- Data Processing Addendum (DPA)
- Subprocessors
- Terms & Conditions
Network Security
- Firewall
Policies
- Data Classification Policy
- Password Policy
- Patch Management Life Cycle
- Encryption Policy
Risk Profile
- Recovery Time Objective
- Critical Dependence
- Data Access Level
- Impact Level
