Security, privacy and data handling.

This page describes the practices Amplivanta applies today. Certifications, audit reports and regional data-residency options are published here only once they are in place — nothing on this page is a forward-looking claim.

Current practices

Described as implemented, without certification claims that are not yet held.

Encryption

Data is encrypted in transit and at rest using industry-standard mechanisms.

Access control

Role-based access, scoped permissions and tenant isolation govern who can reach what.

Auditability

Administrative actions are recorded to an append-only log with the actor and reason.

Data handling

Personal data is processed in line with the Privacy Policy and the Data Processing Agreement.

◆

No certifications are published yet

Formal certifications, penetration-test summaries and regional data-residency options will appear here when they are held and verifiable. Current sub-processor lists and security documentation are available on request.

Request documentation

Reporting a vulnerability

If you believe you have found a security issue, contact us through the contact form and describe the problem and how to reproduce it. Please do not include real customer data in the report.

Response-time commitments and bug-bounty terms are not published until a programme is actually operating.