Xano compliance and security
Xano helps organizations build securely and confidently, from applications and APIs to workflows and agentic systems. Responsible governance is built into how we design and operate our platform. Our controls and practices are regularly evaluated as technologies, threats, and regulatory expectations change, helping organizations put themselves in the best position to build securely.
Compliance
Compliant with the highest software and security standards.
Certifications
Documentation
A repository of Xano's security reports, privacy policies, infrastructure defenses, and legal compliance documents.
Overview
About Xano, how to read this Trust Center, data roles, and security contacts.
Shared Responsibility
Platform vs customer responsibilities across security and compliance.
Access Control
Least privilege, authentication, RBAC, logging, and access revocation.
Development Security
Secure SDLC, code review, testing, and release visibility.
Cloud Security
Hosting regions, dedicated instances, monitoring, DDoS, and firewalls.
Security Testing
Internal audits, penetration testing, ASV scans, and disaster recovery testing.
Endpoint Security
Pre-employment screening, training, phishing simulations, and EDR.
Risk Management
Risk methodology, vendor assessment, DPAs, and ongoing oversight.
Data Privacy
Backups, encryption, access monitoring, and data deletion.
ESG
Environmental responsibility, fair labor, ethics, and governance oversight.
Policies
Access control, backup, change management, and cryptographic control policies.
Product Security
MFA, RBAC, secrets, backups, audit logs, and compliance tools.
AI Governance
AI security, data processing, subprocessors, and customer controls for AI features.
The backend agents can
build and humans can trust.
Join 100,000+ people already building with Xano.
Start today and scale to millions.