Trust Center
Trust, security, and compliance in one place
One self-serve home for how Permafrost handles your data and proves it. Privacy, terms, sub-processors, data residency, security posture, and live certification status — no scavenger hunt.
Certification status
Dates instead of silence. We state what we hold, what is underway, and what is inherited from the infrastructure provider. We never list a certification we do not hold as held.
Permafrost's own certifications
Attestations of Permafrost's product, processes, and controls.
- SOC 2 Type 2Permafrost's own audit of its security controls over an observation window. In progress.In progressExpected H2 2026
- ISO 27001Information-security management certification for Permafrost. On the roadmap after SOC 2 Type 2.PlannedPlanned
- ISO 42001AI-management-system certification covering Permafrost's analysis and AI governance. On the roadmap.PlannedPlanned
Inherited from the infrastructure provider
Substrate certifications that attest the hosting layer beneath Permafrost, not Permafrost's own controls.
- SOC 2Attested at the hosting layer by Permafrost's infrastructure provider. Covers the substrate, not Permafrost's own controls.InheritedCurrent
- ISO 27001Inherited from the infrastructure provider's certified hosting platform.InheritedCurrent
- ISO 27018Cloud-PII protection, inherited from the infrastructure provider's certified platform.InheritedCurrent
Policies & resources
Privacy policyWhat we collect, how we use it, and your rights under the UAE PDPL, EU and UK GDPR, and CCPA/CPRA.Terms of serviceThe agreement that governs use of Permafrost, including cancellation and the deletion window.Cookie policyEvery cookie we set, why, and how long it lives. Analytics is off until you opt in.Sub-processorsThe third parties that process data on our behalf and what each one does.Data residency & transfersWhere data lives and the safeguards that cover every cross-border transfer.Breach notificationOur commitment to notify the regulator and affected data subjects if a breach occurs.Security postureRead-only by default, zero standing write access, the operator boundary, and tenant isolation.Compliance & certificationsPlain, dated status for every framework — what Permafrost holds, what is underway, and what is inherited.