Security & Trust
Our approach to protecting your data and maintaining a transparent location intelligence platform.
Security Overview
Place Signals is an early-stage platform. We prioritize security fundamentals and transparency as we build toward institutional-grade standards.
- SOC 2 Type I/II: Planned for 2026/2027.
- Admin MFA: Required for all internal access.
- Secrets Scanning: Automated in our CI/CD pipelines.
- Data Backups: Automated daily backups for all customer metadata.
Data Handling
We distinguish between public data (which is cached and served) and customer data (which is isolated and encrypted).
Infrastructure
Our services run on Google Cloud Platform (GCP) with data encrypted at rest and in transit (TLS 1.2+).
Third-Party Data
Paid data access is handled server-side only. We maintain an inventory of all public and licensed datasets to ensure licensing compliance.
Access Controls
We use a principle of least privilege. Access to production systems is restricted to essential personnel and audited via Google Cloud logging.
SOC 2 Readiness Checklist
Responsible Disclosure
If you discover a security vulnerability, please report it to us immediately. We will investigate and respond as quickly as possible.
Contact security@placesignals.com