Security & Trust Center

SudoDocs relies on Google Cloud Platform (GCP) and Firebase infrastructure to deliver world-class security, isolation, and compliance out of the box.

1. Infrastructure & Hosting

SudoDocs runs on cloud infrastructure maintained by Google Cloud Platform (GCP) and Firebase across secure, multi-region data centers.

• Data Center Certifications: Our underlying physical infrastructure resides in data centers that maintain strict SOC 1, SOC 2, SOC 3, and ISO/IEC 27001 compliance certifications.
• Automated Scaling & Isolation: Core application compute is deployed via containerized serverless runtimes (Cloud Run), ensuring strict process isolation and workload separation.
• High Availability: Multi-region deployments and automated failover capabilities ensure high uptime and continuous service availability.

2. Data Encryption

Your data is protected at every stage of transmission and storage using industry-standard cryptographic protocols.

• Encryption in Transit: All data transmitted between your applications, browser, and SudoDocs endpoints is encrypted using TLS 1.2+ (HTTPS). Modern cipher suites are enforced to block weak legacy connections.
• Encryption at Rest: All databases, document assets, and system storage volumes are encrypted at rest using AES-256 bit encryption managed by Google Cloud KMS.

3. Payment & Billing Security

SudoDocs does not collect, process, or store raw credit card details or sensitive banking credentials directly on our servers.

• All subscription checkout and billing interactions are managed securely by Paddle, our Merchant of Record.
• Paddle is fully certified as a PCI-DSS Level 1 Service Provider, adhering to the highest standards of international payment safety.

4. Access Control & Authentication

We enforce strict boundary controls across administrative and customer operations.

• Role-Based Access (RBAC): Administrative access to underlying infrastructure is strictly restricted on a least-privilege basis.
• Multi-Factor Authentication (MFA): MFA is mandated across all administrator access points and developer management accounts.
• Tenant Isolation: Customer application databases and assets are logically segregated to prevent cross-tenant data access.

5. Vulnerability Management & Backups

• Continuous Monitoring: Systems are monitored continuously for anomalous activity, traffic spikes, and unauthorized access attempts.
• Automated Backups: Database snapshots and state backups are created automatically and tested periodically for disaster recovery readiness.
• Dependency Patching: Software dependencies and system libraries are regularly audited and updated to mitigate zero-day vulnerabilities.

6. Security Inquiries & Assessments

We are committed to helping prospective business partners evaluate SudoDocs quickly and securely.

If your procurement or security team requires a custom security assessment, Data Processing Addendum (DPA), or vendor evaluation questionnaire, please reach out to us at admin@sudodocs.com.

7. Related Policies

For legal inquiries and data rights, please consult our Privacy Policy.