Security at sarvaOS

We take security seriously. Your data is protected with industry-leading practices and infrastructure.

Our Security Practices

How we protect your data and ensure platform reliability.

Encryption at Rest & In Transit

All data is encrypted using AES-256 at rest and TLS 1.3 in transit. Your data is protected at every stage.

SOC 2 Compliance

We are working towards SOC 2 Type II compliance to ensure the highest standards of security and availability.

Access Controls

Role-based access controls, multi-factor authentication, and principle of least privilege across all systems.

Infrastructure Security

Hosted on leading cloud providers with redundant infrastructure, automated backups, and disaster recovery.

Regular Audits

We conduct regular security audits, penetration testing, and vulnerability assessments to identify and fix issues.

Responsible Disclosure

We maintain a responsible disclosure program. If you discover a vulnerability, please report it to security@sarvaos.com.

Data Handling

Transparency about how we handle your data.

Data Residency

Your data is stored in secure data centers. We offer data residency options for enterprise customers who need data to remain in specific geographic regions.

Data Retention

We retain your data for as long as your account is active. When you delete your account, we permanently remove all associated data within 30 days.

Subprocessors

We carefully vet all subprocessors and maintain a list of third-party services that process your data. Contact us for the full list.

Questions about security?

Reach out to our security team at security@sarvaos.com.