security & trust
How we protect your data.
Varman is in early access. We do not yet hold our own SOC 2 report or ISO 27001 certificate, and we will say so here when we do. Below is what is in place today.
Encrypted in transit
TLS on every connection
Credentials encrypted
Integration secrets encrypted at rest
Role-based access
Built-in and custom roles, audit logged
Daily backups
Database backed up every day
your Trust Center
Let prospects verify you, without the email thread.
Publish a security page for your own company, backed by your control status. Share your certifications, subprocessors, and security details with buyers.
How the Trust Center works →Example customer Trust Center
IllustrationSOC 2 report available on request
ISO 27001 certificate
GDPR data processing addendum
Subprocessor list
Reporting a vulnerability?
We welcome responsible disclosure. Email us and we will respond.
security@varman.io