Security & Compliance
Transparency is at the core of our security commitment. Explore our compliance certifications, security controls, and data processing practices.
Compliance Reports
Download our compliance certifications and audit reports to verify our security posture.
Security Controls
Our comprehensive security control framework ensures protection of your data and systems.
144
Implemented
144
Total Controls
Phala Network Management has approved all policies that detail how customer data may be made accessible and should be handled. These policies are accessible to all employees and contractors.
Phala Network authorizes access to information resources, including data and the systems that store or process sensitive data, based on the principle of least privilege.
Administrator access to web-based management interfaces is encrypted with strong cryptographic algorithms.
Subprocessors
We work with trusted third-party service providers to deliver our services. Below is a list of our current subprocessors and their purposes.
| Subprocessor | Purpose | Jurisdiction | Website |
|---|---|---|---|
| Google Cloud | Infrastructure hosting | US, EU | Visit Google Cloud |
| Marketing analytics | US | Visit LinkedIn | |
| PostHog | Product analytics | US/EU | Visit PostHog |
| Stripe | Payment processing | US | Visit Stripe |
| Attio | CRM | UK | Visit Attio |
| Customer.io | Marketing & Email services | US | Visit Customer.io |
| Fingerprint | Security analytics | US | Visit Fingerprint |
| GitHub | Code repository and software development platform | US | Visit GitHub |
All subprocessor agreements impose data protection obligations substantially similar to those in our main DPA.
We notify customers of any intended additions or replacements to the subprocessor list, allowing opportunity to object on data protection grounds.
Phala remains liable for subprocessor performance in accordance with our DPA terms.