Security & Privacy Overview
SOC 2 Type II Certified
Zight is SOC 2 Type II certified, meeting rigorous standards for security, availability, and confidentiality. Our controls and processes are independently audited to ensure your data remains protected. Learn more about our SOC 2 Type II compliance.
Enterprise-Grade Security
Enterprise Plans offer extended security and admin functionality like SSO with SAML provisioning and domain lockdown which ensures all of your employees are regimented under your security settings. Learn more about our Enterprise Solution.
Custom Sharing & Data Retention Rules
Each piece of content you create can have different security controls: public, private to the organization (for teams & enterprise), password protected and more. Enforce data policies that would ensure data gets deleted after a certain amount of time, or that a public link expires
Privacy to Fit Your Needs
Zight claims no ownership over any of your data. You retain all intellectual property and other rights to your documents and the information contained therein.
Data is transferred between user devices and our servers using up to 256-bit encrypted connection via TLS 1.2 and a world-class certificate provider. The cryptographic keys used to secure Zight are protected by Amazon’s Key Management Services. We are committed to maintaining GDPR compliance. For more information, see our Privacy Policy and Terms of Service.
Security Backed by Hardened Infrastructure
Powered by Amazon Web Services (AWS), the industry’s leading provider of secure computing infrastructure. We chose AWS because of its stringent security measures, which include the following certifications: ISO 27001: Information Security Management Systems (ISMS) ISO 27017: Cloud-specific security control guidance ISO 27018: Protection of Personally Identifiable Information (PII) in public clouds ISO 9001: Quality management systems SOC1 SOC2 SOC3 PCI DSS 3.2 You can securely access Zight at any time and from any device or location.
Visibility and Control
Enterprise plans offer features that allow you to maintain governance of your accounts so you can better adhere to compliance requirements. These features include document-sharing restrictions, IP whitelisting, and whitelisted domains. We follow security best practices and protect your data by using account management tools to allow account and team admins to integrate with their identity management platform and control collaboration settings.
"It has excellent security features. First, it was simple to set up storage on our company servers instead of the Zight cloud, meaning that all of our captures remain under our control. This allows for capturing more sensitive information securely. Second, it's possible to set security on ANY capture to password-protect or otherwise restrict access to it."
Karen Goeller | Software Delivery Leader | biBerk Business InsuranceExplore Other Zight Features
Explore other Zight features by clicking the buttons.
Frequently Asked Questions
Our DPA is available for review. You can request it by contacting us at support@getcloudapp.com
To learn more about the security procedures employed by AWS, please review their documentation.