We understand that Pods can contain highly sensitive commercial and client data so we embed security into every aspect of the platform.
Our Terms of Service and Privacy Policy can be viewed here - https://www.sendtrumpet.com/policies
trumpet is fully GDPR compliant, and can be used in a GDPR compliant way.
trumpet is currently going through its SOC 2 accreditation, but the tools and services we use to store your data are SOC 2 compliant - namely AWS (Europe) and MongoDB (Ireland). All data is encrypted in transit, meaning we only use secure protocols for transferring data to and from AWS and MongoDB.
Amazon Web Services (AWS) lays the strong foundation trumpet is built on. It provides our developers the flexibility and capacity to rapidly deploy and scale services on-demand, while maintaining a shared-responsibility understanding. In short, we look after your data IN the cloud by implementing a number of security controls, while AWS protects your data ON the cloud. They do this through physical security of their European data centres, and environmental considerations such as site surveying, risk management, and continuous monitoring.