/Avatar-MainMark-FullColor-400px.png){kind=avatar}
Avatar Security
Security, Privacy and Control
At Avatar, we prioritize the security and privacy of our customers' data. We are committed to maintaining a robust security posture and adhere to industry best practices. We treat compliance as a starting point for our security practice.
We aim to maintain client data safety as the primary function of our security practice, with compliance to standards as a default state. Our client data is stored, interpreted, and used within our SaaS platform hosted within AWS, and we use Service Organization Control 2 (SOC2), AWS Well Architected Framework, and NIST 27001 as our primary compliance frameworks.
Security
We have robust authentication and authorization mechanisms in place including logistical access controls, system operations, and change management.
Availability
We have established procedures for incident management, monitoring and maintenance, data backup and recovery, confidentiality, data encryption, and information disposal.
Privacy
We adhere to privacy principles that govern personal data protection, consent and choice, and data integrity and quality.
Why Does It Matter?
We are continuously compliant with SOC2 requirements. Our SOC2 Type 1 audit has been successfully completed, confirming that our systems and processes are designed to meet the trust service criteria set forth by the AICPA.
We also successfully completed our Type 2 audit. This milestone confirms that your data is safe and secure with us, as demonstrated by a holistic third-party audit of our controls.
We are always available to address any specific security concerns you may have. For further details or questions, please do not hesitate to contact us. Thank you for your trust in Avatar.
