Security
Security and trust
Compensation data is among the most sensitive information a company holds. Here is how CompTool protects it. Reports, policies and security documentation are in our Trust Center.
Our security profile
How CompTool protects your data
SOC 2 Type II
CompTool is audited annually against SOC 2 Type II. Vanta monitors our application and infrastructure around the clock to keep them compliant between audits.
Get the SOC 2 reportEncryption
Customer data is encrypted at rest and in transit. Encryption keys are managed in AWS Key Management Service (KMS), backed by hardware security modules.
Infrastructure
CompTool runs on Amazon Web Services and uses its built-in security services, including KMS, GuardDuty and Inspector.
Application security
Every change is checked with GitHub Advanced Security: CodeQL static analysis, secret scanning and Dependabot dependency updates.
Single sign-on
SAML single sign-on lets your team sign in through your company’s identity provider.
AI and your data
CompTool’s AI never uses customer data to train models and never touches employee data or PII.
How CompTool uses AINeed more detail? Our SOC 2 Type II report, security policies and documentation are in the CompTool Trust Center.
Visit the Trust Center