Security & Data Handling

How we protect your company's travel and financial data.

Placeholder. Security documentation must be reviewed and validated before launch. The content below is scaffolding only.

Data encryption

All data is encrypted in transit using TLS 1.2 or higher. Data at rest is encrypted using AES-256 encryption.

Access controls

Role-based access controls ensure users only see data relevant to their role. Enterprise customers can configure SSO via SAML 2.0 and provision users via SCIM.

Infrastructure

CorpoTrek is hosted on enterprise-grade cloud infrastructure with redundant systems, automated backups, and disaster recovery procedures.

Compliance

We maintain compliance with applicable data protection regulations. SOC 2 Type II certification is in progress. Contact us for our latest compliance documentation.

Incident response

We maintain a documented incident response plan. In the event of a security incident affecting customer data, affected customers will be notified in accordance with applicable law and contractual obligations.

Reporting security issues

To report a security vulnerability, contact security@corpotrek.com.