Trust Center

Security Commitments

Customers deserve clarity. We publish our security commitments in plain language so you know how we handle identity, network, and data protection every day.

Identity

Phishing‑resistant MFA, least‑privilege, just‑in‑time admin.

Network

Segmentation, strict egress/DNS, vendor access time‑boxed and recorded.

Data

Immutable backups, landing‑zone restores, quarterly clean‑restore reports.

Notices & Disclosures

If there is ever any event, outage, security issue, or any other change that could affect your data or service, we will not remain silent, we will not wait – we will immediately write and officially inform you.

  • Incident advisories and maintenance windows.
  • Past disclosures archived for reference.
  • Contact instructions for affected customers.
Trust Center – Security and Compliance Hub | Ransom Security

Data Handling & Retention

We separate customer data from internal systems and retain only what’s necessary. Backups are immutable and auditable.

  • Retention schedules and deletion SLAs.
  • Object‑lock/WORM policies for backup data.
  • Evidence available under NDA.
Data Handling & Retention

Supplier & Sub‑Processor List

We openly declare our suppliers and sub-processors, including their roles and evaluation, so that compliance, risk analysis, and due diligence are effortless.

- EDR, firewall, backup, and cloud providers.
- Annual reviews and SOC/ISO evidence on request.
- Replacement procedures if a supplier fails control tests.

Frequently Asked Questions

We provide complete information in simple language about how we protect identity, network, and customer data every day, so that customers can easily understand how their data remains secure.

Customer data is kept separate from internal systems and is kept only as necessary. Backups are immutable and fully auditable.

Yes. Customers can request a copy or export of their data — for migration, audit or compliance needs.

Yes, the Trust Center was created for this very purpose – to provide clients and auditors with fully transparent information about security, data handling, and vendors.