Security

All data stored in Swifton is encrypted at rest using AES-256. Data in transit is protected with TLS 1.3. Database backups are encrypted using the same standards.

Swifton runs on SOC 2 Type II certified infrastructure. We conduct quarterly penetration tests with third-party security firms and publish summaries of findings and remediations.

Production systems use least-privilege access principles. All internal access is authenticated with hardware security keys and logged. No human access to customer data occurs without explicit consent except in emergency scenarios.

We operate a responsible disclosure program. If you discover a security vulnerability, please report it to security@swifton.io. We commit to acknowledging reports within 24 hours and providing a resolution timeline within 72 hours.

Swifton is SOC 2 Type II certified, GDPR compliant, and CCPA compliant. Enterprise customers can request copies of audit reports under NDA.