Incenter · security & trust
What Incenter holds, and how it’s protected.
You’re about to give a testing platform read access to your environment. Here’s exactly what it holds, who can reach it, and what happens if something goes wrong.
How Incenter handles your data
01Data handlingIncenter holds the minimum it needs to test and evidence: findings, asset metadata, and read-only context. Testing is non-destructive by design and never copies your data off-platform. Data residency options on request.
02Access controlsLeast-privilege, scoped credentials for every connected system; role-based access within the platform; full audit logging of who saw and did what.
03Cloud infrastructureIncenter runs on Amazon Web Services: infrastructure independently certified to SOC 2, ISO 27001 and PCI DSS at the provider level.
04Regular security testingThe platform is put through regular independent security testing itself.
05Incident processA defined process for handling any security event affecting the platform or your data, with notification commitments set out in your agreement.