Security and sovereignty, by design
Bridge is self-hosted by default. Your data lives in your environment, not ours. Here's the control framework behind the platform — and where we are on the certifications buyers ask about.
Certifications & posture
SOC 2 Type II
In progressIndependent audit of security, availability, and confidentiality controls. Report available under NDA at final.
ISO 27001
In progressInformation security management system certified to the international standard.
GDPR & CCPA
Compliant postureData-subject rights, DPA, and sub-processor transparency. EU data residency supported.
Data residency
US · EUDeploy in the region you need. Your data never leaves your chosen boundary.
What protects your data
Encryption
TLS in transit, AES-256 at rest. Customer-managed keys available on Enterprise.
RBAC
Library- and table-level read/write control. Role-based access for teams.
SSO / SAML
Google, Okta, and SAML 2.0 for Enterprise. SCIM provisioning on roadmap.
Audit logging
Immutable operation and access logs for every action in the control plane.
On-prem & isolated operation
Run in isolated networks. No inbound connectivity; sync via file exchange across gateways.
No data egress
Self-hosted by design. We never see your rows — only your license heartbeat.
Sub-processors, status & policies
Sub-processors
Who we use, and for what. Updated quarterly.
System status
Real-time availability of the license service.
DPA & policies
Data Processing Agreement, privacy, and terms.
These pages are placeholders in the v1 static site and will be populated in the full-stack release.
Want the security questionnaire answered?
We respond to vendor security reviews fast. Book a security call with an engineer.