Encryption in Transit and at Rest
All data transmitted between customer environments and our platform is encrypted using TLS 1.2 or higher. Data at rest in our systems is encrypted using AES-256.
Back to Home
Compliance
Security Policy
Last updated: October 31, 2026
At Netra, security isn't just a feature — it's the foundation of our product and our company. As a data security company entrusted with protecting sensitive business and personal information, we take security seriously at every level: people, processes, and technology.
Whether you're a fast-growing startup or a large enterprise, we understand that trust is earned. Here's how we earn yours.
Physical Security and Data Hosting
Netra uses Amazon Web Services (AWS) data centers located in Singapore region.
Product and Data Security
Fine-Grained Access Controls
We enforce role-based access controls (RBAC) internally and provide customers with similar capabilities to manage who can access what.
Audit Logging
Key actions and system events are logged for traceability, anomaly detection, and incident response.
Data Residency & Isolation
Each customer's data is logically isolated from other customers' data within our AWS environment. By default, data is stored in Singapore region, with support for alternative regions available upon request, as supported by AWS. Files captured under a customer's policies, such as attachments, uploaded files, and screenshots, are stored only in storage the customer provides.
Code-Signed Agents
Our endpoint sensor software is code-signed by Netra engineers using official Microsoft, Apple, and Google signing mechanisms to ensure authenticity and integrity before deployment.
Infrastructure Security
Hosted on AWS
Our infrastructure is hosted on Amazon Web Services, which meets SOC 2, ISO 27001, and other industry certifications.
Network Segmentation & Firewalling
We use VPCs, private subnets, and security groups to isolate and restrict services.
Vulnerability Management
We use automated tools to scan dependencies and containers for vulnerabilities. High-severity issues are remediated within defined SLAs.
Security Operations
Employee Access
Access to production systems is limited to a small number of vetted personnel, protected by multi-factor authentication (MFA) and audited regularly.
Incident Response
We maintain an internal incident response playbook and are committed to notifying customers within 48 hours of discovery in the event of a breach.
Third-Party Risk Management
We maintain a list of subprocessors and ensure all vendors meet our data protection and security requirements. See our Subprocessors page.
Compliance and Data Protection
GDPR & CCPA
We are committed to complying with GDPR, CCPA, and other applicable privacy laws. We offer Data Processing Agreements (DPAs) and support data subject rights.
Data Minimization
We limit data collection to only what's necessary for our services and let customers set how long file evidence is kept in their own storage.
Ongoing Security Commitment
We recognize that security is never "done." We regularly conduct internal reviews, threat modeling exercises, and code audits. Netra is ISO/IEC 27001:2022 certified, has a SOC 2 Type I report available, and is working toward SOC 2 Type II. Security documentation is available under NDA.