Built to be trusted
from day one.
The boring stuff your security team cares about — already done. AES-256, TLS 1.3, SOC 2 in progress, per-tenant keys on Enterprise.
Encryption everywhere
AES-256 at rest. TLS 1.3 in transit. Per-tenant encryption keys on Enterprise. Documents are encrypted before they leave your machine.
Access control
SAML 2.0 SSO and OIDC for Enterprise. SCIM 2.0 user provisioning. Role-based access controls per document and per workspace.
Audit trail
Every action logged: who opened, viewed, edited, downloaded, deleted. Immutable, exportable, retained for the period you set.
Compliance
SOC 2 Type II in progress. GDPR, PIPEDA, CCPA aligned. HIPAA BAA available on Enterprise. ESIGN & eIDAS compliant signatures.
Data residency
Pick your region: US (Virginia), EU (Ireland), Canada (Montreal), or self-host on your own infrastructure (Enterprise).
Vulnerability program
Annual third-party penetration test. Public bug bounty via HackerOne. Critical fixes within 24 hours.
Compliance roadmap
Where we are. Where we're going.
Need our SOC 2 report or DPA?
Email security@edts.ca. We'll send the latest documents under NDA within one business day.