> For the complete documentation index, see [llms.txt](https://docs.nalpeiron.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.nalpeiron.com/enterprise-security/security-and-platform-details.md).

# Security & Platform Details

Explore Nalpeiron's enterprise-grade security safeguards, data center locations, industry certifications, and incident response practices that keep Customer Data protected.

## Our clients rely on us to keep their data secure.

Our approach to security is integrated into our product design, policies, and procedures.

{% embed url="<https://youtu.be/SMyLjrCKMI4?si=tW_XGTPoxNOxGfXd>" %}

Reliability, scalability, trust, and security are core to our commitment to our customers. Our enterprise-grade security features and comprehensive audits ensure we're aligned with industry best practices.

**Nalpeiron maintains administrative, physical, and technical safeguards designed to protect the security, confidentiality, and integrity of Customer Data.**

These safeguards include, but are not limited to: (a) encryption of Customer Data in transit and at rest using industry-standard protocols including AES256 encryption and HTTPS, with key management best practices and strict user access control; (b) authentication using OAuth standard for user access and API interactions; (c) regular automated backups of Customer Data performed at least daily, with backup data stored in geographically redundant locations; (d) implementation of access controls and authentication mechanisms to prevent unauthorized access to Customer Data; (e) regular security assessments, vulnerability scanning, and penetration testing of the Service infrastructure; (f) maintenance of incident response and disaster recovery procedures; (g) employee training on data security and confidentiality obligations; and (h) monitoring and logging of system access and activities.

### Two Data Center Locations (Europe and US/World)

<figure><img src="https://952415364-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F8tBSQqR1NJ4p8v0kM7eW%2Fuploads%2FkmLgfaAD1HMj2OdWmueU%2F2%20data%20centers.png?alt=media&amp;token=c8a16811-bc7d-4f9b-83d8-0d84dd74e8a4" alt=""><figcaption></figcaption></figure>

Nalpeiron maintains two separate data center locations for our service: clients in Europe can choose to host their data only in the Eurozone (Frankfurt), or in our US-based data centers for a Global presence (or both).

### Industry Standard Security Certification

Nalpeiron adheres to AICPA’s Trust Services Criteria: Security, Availability, Processing Integrity, Confidentiality, and Privacy.

<div align="left"><figure><img src="https://952415364-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F8tBSQqR1NJ4p8v0kM7eW%2Fuploads%2FMbsrTUvpwKfN179UVsHv%2Fsecurity1000.png?alt=media&amp;token=55b13810-620b-4dc9-a123-2d514843ad94" alt=""><figcaption></figcaption></figure></div>

**Nalpeiron is SOC 2 Type 2 certified.**

Our team of engineers continuously monitors our infrastructure for cybersecurity events and threats, leveraging the Drata Security & Compliance Automation Platform and independent third-party testers to ensure our platform remains secure and is regularly tested.

We combine best practices to keep your data safe.

**AWS and Azure are certified to the SOC2 and ISO 27001 standards.**

Our cloud providers (AWS and Azure) comply with industry-leading security practices and frameworks, including SOC2, ISO 27001, and PCI DSS. AWS and Azure data centers are monitored 24/7 by security personnel, biometric scanning, video surveillance, and other advanced security measures.

### Incident response and monitoring

Nalpeiron implements a protocol for handling security events and other operational issues, including escalation procedures, rapid mitigation, and post-mortems.

#### Status reporting

<figure><img src="https://952415364-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F8tBSQqR1NJ4p8v0kM7eW%2Fuploads%2FF9kQrCrnUvTp5FAL9yGY%2Fstatus.png?alt=media&amp;token=58b797f6-eaa9-4def-b0bd-64c4b4eb7ffa" alt=""><figcaption></figcaption></figure>

You can visit our [status page](https://status.zentitle.io/) for updates.

### Build your own security

**Need a different security setup? We can build what you need on your choice of hyperscaler.**

With our single tenant option, you have total flexibility in your deployment's build, location, security, and structure.

[Single-tenant hosting](https://docs.nalpeiron.com/zentitle2-docs/use-cases/single-tenant-option) allows you to manage all your data independently from our other customers. Some organizations prefer their data to be segregated this way. It also provides additional independence—for example, if you have any concerns about Nalpeiron's ongoing viability, we include in our standard single-tenant contract the ability for you to take over that instance if any unusual circumstances were to affect our organization.

Of course, even within that single-tenant environment, you continue to benefit from our TurboScale technology, which enables your instance to scale dynamically as you add more customers, products, and end-users.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.nalpeiron.com/enterprise-security/security-and-platform-details.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.