Security & privacy
Security and privacy that make your duty of care demonstrable
At Soterna, security and privacy are not bolted on afterwards, but the foundation beneath every module. Those who report are protected, and that is precisely what gives you reliable, accountable signals.
- EU-hosted
- GDPR-native
- Encryption at rest & in transit
- Independent by design
- ISO 27001 track prepared
Why organisations trust us
Trust that is built into the design, not bolted on
Privacy by design
Privacy is the starting point of every module. We limit data to what is necessary and protect the reporter throughout: without that protection, no signal.
Encrypted and separated
Data is encrypted at rest and in transit. We keep the reporter's identity apart from the report content, so sensitive information is never needlessly brought together.
Strict access
Every role sees only what is strictly necessary. Board and HR see only aggregated reporting, never the content of an individual case.
Fully accountable
We record every action within a file in an immutable log. Access is therefore always traceable and you can demonstrate accountability.
Data minimisation
We keep only what is needed, with clear retention periods. Less data means less risk, for the reporter and for your organisation.
Hosted in Europe
Soterna runs entirely within the EU with European cloud providers, with the GDPR as its starting point and data residency arrangements whenever you need them.
Security FAQ
Frequently asked questions about security
Where is data hosted?
Entirely within the EU, with European cloud providers that hold appropriate certifications. Do you have specific data residency requirements? We are happy to make arrangements together with our team.
Is Soterna GDPR-compliant?
The platform is built in line with GDPR principles: data minimisation, purpose limitation and privacy by design. With clients we conclude a data processing agreement; you will receive the template during the quotation process.
How can I be sure it is secure?
We are happy to complete the questionnaires from your security or privacy officer and to walk through the details in a call with your IT team. Just get in touch and we will think along with you.
Begin
Prefer to talk it through with our team?
We think along on your security and privacy questions, complete due-diligence questionnaires and schedule a call with your IT or security team.