Trust Center
Security, privacy, and deployment trust
Review Oobeya’s access controls, audit status, privacy practices, and deployment options. Contact our security team for a review specific to your environment.
Security assurance
Certification and audit status
Review the status below and request supporting materials for your security evaluation.
SOC 2 Type ICompleted
Certification completed with Thoropass.
SOC 2 Type IIUnder audit
The Type II audit is currently in progress.
Security practices
Controls for engineering data and operations
Identity, infrastructure, monitoring, and privacy practices for your security review.
Identity & Access
- SSO with Okta, LDAP, Active Directory, and Microsoft Entra
- Role-based access control (RBAC)
- Password and account recovery controls
- Least-privilege access and account governance
Deployment & Infrastructure
- Managed SaaS deployment
- Private cloud deployment
- Fully on-premise deployment
- Network isolation & VPC peering
- Auto-scaling & high availability
Monitoring & Auditability
- 24/7 infrastructure monitoring
- Audit logging
- Real-time anomaly detection
- Administrative visibility controls
- Operational event review
Vulnerability Management
- Regular penetration testing
- Automated dependency scanning
- SAST & DAST in CI/CD pipelines
- Coordinated vulnerability review workflow
Data Protection & Privacy
- Data residency options (EU, US, etc.)
- Data retention & deletion policies
- No customer source code storage
- Team and user-level privacy controls
- Automated daily backups with point-in-time recovery
Security & Compliance
- SOC 2 Type I certification completed with Thoropass
- SOC 2 Type II audit in progress
- GDPR-conscious operating model
- Security practices in the SDLC
- Centralized endpoint protection
- Security training and confidentiality agreements
Trust resources
Review the details for your environment
Start with the public information, then request the materials your security and procurement teams need.
Security FAQ
Before your security review
Common questions about controls, privacy, and deployment.
What does the Trust Center cover?
Oobeya’s audit status, access controls, deployment options, data protection, and security review process.
Which enterprise access controls are supported?
SSO with Okta, LDAP, Active Directory, and Microsoft Entra; RBAC; audit logging; account recovery; and least-privilege access patterns.
Can Oobeya run in private infrastructure?
Yes. Managed SaaS, private cloud, and fully on-premise options are available. Review On-Premise for deployment details.
Where can we review privacy practices?
Read the privacy policy and request details on data residency, retention, deletion, and privacy controls for your deployment.
How do we request security materials?
Use Request security review to share the documents and control information your team needs for evaluation.
Can the review cover our architecture?
Yes. Include your deployment model, network restrictions, identity requirements, and architecture questions in your request.
Who should join the review?
Security reviewers, enterprise architects, platform leaders, procurement stakeholders, and engineering decision-makers involved in your evaluation.
Security review
Discuss your security requirements
Share your deployment model, access requirements, and review questions with our security team.