Audits

Traceability as the foundation of auditing

The way we operate makes auditing easier by design:

Every change to your environment's configuration is immutably recorded in version control: what changed, who changed it and when (see How we work).
Administrative access is logged (see Access control).
Relevant incidents are documented along with their post-incident analysis (see Incident management).

This means that, in the event of an audit — yours, a third party's or a regulatory one — there is a verifiable trail of your environment's state and evolution.

Security questionnaires

If your organization requires completing a vendor security questionnaire as part of due diligence, this Trust Center covers most of the usual questions. For the rest, write to us.