Skip to content
ENFRع中TRहिES
Talk to us

Security

Your data, and how it is kept.

Talk to us See Warp

Including the parts we have not finished, because a security page that only lists strengths is not a security page.

What we hold, where it lives, who can reach it, and how you get it back if you decide to leave.

The basics

What is in place today.

In transit and at rest

  • TLS on every connection
  • Encrypted at rest
  • Secrets held outside the codebase
  • No customer data in logs

Access

  • Per-person accounts, no shared logins
  • Role-based permissions
  • Scoped API tokens per extension
  • Access revoked in one click

Isolation

  • Row-level security between tenants
  • Asserted in the test suite
  • Dedicated instance on Enterprise
  • Data residency on Enterprise

Leaving

Export is free, and it is a feature rather than a favour.

The test of whether a platform respects your data is what happens when you want to take it somewhere else.

  • Export anything, any time — products, customers, orders, conversations, ledger
  • No charge to export — and no charge to close the account
  • The data model is public — Warp is MIT licensed, so you can read the shape before you commit
  • No lock-in by obscurity — if leaving is hard, it should be hard because you do not want to
Export
Free, complete, any time
Data model
Public, MIT licensed
Deletion
On request, and on account closure

What we are still working on

Stated plainly, because you will find out anyway.

  • Formal certification

    We do not hold SOC 2 or ISO 27001 today. If your procurement requires one, tell us now rather than at contract stage — we will tell you honestly where we are.

  • Backups are not yet fully offsite

    This is a known gap and it is being fixed. We would rather you read it here than discover it in a questionnaire.

  • Penetration testing

    Internal review is continuous; independent testing is scheduled rather than complete.

  • Ask us anything specific

    A vague security page is a warning sign. If there is a control your business needs, ask and we will answer with a date or a no.

One thing we will not do

0

customer data sold, shared or used to train anything.

Your catalogue, your customers and your conversations are yours. They do not leave to an ad platform, they are not sold, and they are not used to improve a model that somebody else benefits from.

Next step

Send us your security questionnaire.

We will fill it in properly, including the questions where the answer is "not yet". A vendor who answers every question with a yes is telling you something.

Book a demo See pricing
Certification
None yet — ask us where we are
Export
Free and complete
Data residency
Available on Enterprise