Transparency about security, compliance, and infrastructure in one place.
PRIVACY BY DESIGN
Heuristik's Trust Center
Welcome to Heuristik's Trust Center. Use this Trust Center to learn about our security posture, data privacy practices and legal compliance, and to request access to our supporting audit reports and documentation.
GDPR
Advanced privacy standards for the protection of personal data.
Aligned
HIPAA
The Health Insurance Portability and Accountability Act (HIPAA).
Aligned
ENS HIGH
Verified security practices for enterprise-grade data protection.
Certified
ISO 27001
Global excellence in information security management.
Certified
NIS2
EU's strictest cybersecurity directive.
Aligned
ENS RD311/2022 HIGH
34/5704/26/10134
Auditor: OCA Global
ISO/IEC 27001:2022
34/5700/26/10128
Auditor: OCA Global
Hosting: AWS (multi-account organization with Service Control Policies)
Encryption: AES-256 at rest (AWS KMS) + TLS 1.2+ in transit
Retention: Infrastructure audit logs retained for 2 years, platform audit records for 6 years
Backups: Daily automated backups with cross-region copies and point-in-time recovery for databases
Security monitoring: Continuous threat detection, configuration compliance and audit logging across all regions
Regions: eu-west-1, us-east-2
Data centers: AWS Ireland, AWS Ohio