What we are certified against, and what we enforce for you.
Two different claims, deliberately kept apart on this page: the attestations Altide holds as a vendor, and the frameworks the platform produces evidence for on your estate.
What Altide holds.
Reports and certificates are available to customers and evaluators under NDA.
AICPA SOC 2 Type II
Independent attestation of security, availability, and confidentiality controls over an observation period.
ISO/IEC 27001
Certified information security management system covering the platform, its operations, and its supply chain.
CREST-validated testing
Offensive testing methodology in Altide - DetectHub aligned to CREST practice for penetration testing.
What the platform enforces on your estate.
Evidence is produced as a by-product of enforcement rather than assembled by hand before an audit.
- SOC 2
- Continuous control evidence across access, change, and monitoring.
- ISO 27001
- Asset inventory, risk treatment, and control evidence produced from live telemetry.
- CIS Benchmarks
- Continuous baseline enforcement across Windows, macOS, and Linux fleets.
How your telemetry is handled.
Encryption
AES-256 GCM at rest and TLS 1.3 in transit. Customer-managed keys are backed by FIPS 140-3 Level 3 HSMs where Altide - Vault is deployed.
Tenancy and residency
Multi-tenant SaaS with regional residency, or a single-tenant control plane in your own VPC, on-premise, or in an air-gapped enclave.
Access to your data
Support access is request-based, time-boxed, logged, and visible to you in the same audit trail your own administrators appear in.
Model training
Customer telemetry is never used to train models shared across customers. Detection content improvements ship as rules and signatures, not as your data.
Vulnerability disclosure
Report a vulnerability in Altide software or infrastructure to security@altide.com. We acknowledge within one business day, and PGP is available on request. Researchers acting in good faith under this policy will not face legal action from us.