Security & compliance

Your data, guarded.

Task Response is built for inboxes that matter — encrypted end-to-end, tenant-isolated, audited.

SOC 2 Type II

Annual SOC 2 Type II audits verify our controls for security, availability, and confidentiality.

Certified

GDPR Compliance

Your data is processed in accordance with EU data protection regulations.

Compliant

Data Encryption

AES-256 at rest, TLS 1.3 in transit. Email content uses per-row column-level encryption.

Active

OAuth 2.0 Authentication

All email provider connections use OAuth 2.0. We never store or have access to your email passwords.

Active

Token Security

OAuth refresh tokens are encrypted at rest and never leave our server-side edge functions.

Active

Email Content Protection

Email bodies are never logged in plaintext. Decrypted only in edge function memory during a single request.

Active

Tenant Isolation

Every database query filters by authenticated user ID. Row-Level Security is enforced on every table.

Active

Penetration Testing

Regular third-party penetration testing and vulnerability assessments against our infrastructure.

Quarterly

Report a vulnerability

If you discover a security vulnerability, please report it to our security team. We follow a responsible disclosure policy.