Security & Compliance

Your data security and privacy are our top priorities. We maintain industry-leading security practices and compliance certifications.

Compliance Certifications

SOC 2
Type II Certified

Independently audited for security, availability, and confidentiality controls.

GDPR
Compliant

Full compliance with EU General Data Protection Regulation requirements.

CCPA
Compliant

Adheres to California Consumer Privacy Act standards.

Security Measures

Data Encryption

  • TLS 1.3 encryption for all data in transit
  • AES-256 encryption for sensitive data at rest
  • Hardware security modules (HSM) for key management

Infrastructure Security

  • Multi-region redundancy and failover
  • DDoS protection and rate limiting
  • 24/7 security monitoring and incident response

Access Controls

  • Role-based access control (RBAC)
  • Multi-factor authentication (MFA) support
  • Detailed audit logging of all access

Privacy Protection

  • We don't store API request/response content
  • Data processing agreements (DPA) available
  • Regular third-party security audits

Responsible Disclosure

We value the security research community and welcome reports of potential security vulnerabilities. If you discover a security issue, please report it to:

security@apiproxy.ai

We commit to acknowledging reports within 24 hours and providing updates as we investigate.

Security Best Practices

We recommend following these practices when using our API:

Protect Your API Keys

Never commit API keys to version control or share them publicly. Rotate keys regularly and use environment variables.

Use IP Allowlisting

Restrict API key usage to specific IP addresses or ranges when possible.

Monitor Usage

Regularly review your API usage logs for suspicious activity or unexpected patterns.

Enable Alerts

Set up usage alerts to be notified of unusual spikes in API calls or costs.

Questions about security?

Our security team is here to help answer your questions.

security@apiproxy.ai