At Canopy Analytics, security is fundamental to everything we do. We are committed to protecting the confidentiality, integrity, and availability of the data our customers entrust to us through a comprehensive, continuously monitored security program.

Canopy Analytics has successfully achieved a SOC 2 Type II attestation, providing independent validation of our information security program and our ongoing commitment to protecting customer data.

This independent assessment demonstrates our dedication to maintaining effective security practices and gives customers confidence that protecting their information is a top priority.

Our security program incorporates administrative, technical, and physical safeguards designed to protect customer information, including:

• SOC 2 Type II independently audited controls
• Encryption of data in transit and at rest
• Role-based access controls following the principle of least privilege
• Multi-factor authentication for privileged access
• Continuous monitoring, logging, and security alerting
• Secure software development and change management practices
• Regular vulnerability scanning and penetration testing
• Company-managed, encrypted endpoint devices
• Security awareness training for all personnel
• Documented incident response and business continuity processes

Security is an ongoing commitment. We continually evaluate emerging threats, strengthen our security controls, and enhance our security program to help protect customer information and maintain the trust our customers place in us.

Prospective customers may request a copy of our SOC 2 Type II report.

If there are any questions regarding this security policy, you may contact us using the information below.

• By email: support@canopyanalytics.com.
• By phone number: +1 (855) 280-6222.