Our commitment to protecting your data and keeping our platform resilient.
Last updated: November 9, 2025
We prioritize confidentiality, integrity, and availability across every layer of the SuperArc platform. Our security program is grounded in industry standards and continuously adapts to emerging threats.
SuperArc runs on modern cloud infrastructure with hardened configurations, network segmentation, and continuous monitoring. We employ automated scanning, intrusion detection, and real-time alerting to identify and respond to anomalous activity.
All data is encrypted in transit using TLS 1.2+ and at rest using strong encryption algorithms. Access to production systems is restricted, logged, and reviewed regularly. Secrets are managed securely and rotated on a defined schedule.
We follow secure software development lifecycle practices, including code review, automated testing, dependency auditing, and continuous vulnerability management. Critical patches are prioritized and deployed quickly.
Access to customer data is granted on a least-privilege basis. Multifactor authentication is required for internal accounts, and administrative actions are logged for traceability.
We maintain documented incident response, disaster recovery, and business continuity plans. Backups are encrypted and tested regularly to ensure service restoration targets are met.
If you discover a vulnerability or have questions about our security practices, contact us at security@superarc.app. We appreciate responsible disclosure and work swiftly to resolve verified findings.