Trust & Security

Certifications, compliance, and how to request our security documentation

Security is built into SuperFile from the ground up. Every file is sealed with key-separated encryption, and the programme around it is built to the controls enterprises, governments, and regulated industries ask about — controls aligned to SOC 2 and ISO/IEC 27001, with those audits in progress. SuperFile is listed on the FedRAMP Marketplace under the FedRAMP 20x path; it is not yet FedRAMP authorized, and we will say so until it is. We say where each one has got to rather than claiming a certificate before an auditor has issued it; when a report exists it is shared here and under NDA.

Our compliance programme

Where a line says audit in progress, the controls are implemented and evidenced internally and an external audit is under way; no report has been issued yet. Nothing on this page is an attestation until it names an auditor and a period.

SOC 2Security, availability & confidentiality controlsControls aligned · audit in progress
ISO/IEC 27001:2022Information security management systemControls aligned · certification audit in progress
GDPREU & UK data protection · GDPR Local is our EU representative
HIPAASafeguards for protected health informationControls aligned · no third-party attestation yet
GDPR — Verified by GDPR LocalRegistration ID 2UFC7WR · Verify ↗

Request our security documentation

Our security-programme documentation — control descriptions, the ISO 27001 Statement of Applicability, our data-flow and subprocessor inventory, and any audit report once one has been issued — is available to prospective and current customers under NDA. We will tell you plainly which items exist today and which are still in audit. Tell us a little about your needs and our team will follow up.

By requesting, you agree these documents are confidential and shared under NDA. We do not host them publicly.