GoRefer Trust Center

Trust Center

Updated April 2026

Operational

All systems operational

Updated Apr 1, 2026

Your data — and your clients' data — deserves a clear explanation of how it's protected. This Trust Center documents GoRefer's security practices, privacy policies, and compliance commitments in plain language so you can make informed decisions.

Every page here maps to a real control in our platform. When we say we encrypt something, we explain exactly how. When we have a limitation or a certification in progress, we say so — because honesty builds more trust than marketing copy.

Security & Compliance Posture

AES-256 Encrypted

TLS 1.3

MFA Enabled

AWS-Hosted

SOC 2-Aligned

GDPR-Aligned

HIPAA-Aligned

IRS 4557-Aligned

99.9% SLA

Browse by Topic

Security

Encryption, authentication, threat detection, and data security

Infrastructure

Cloud hosting, availability SLA, and disaster recovery

Access Control

RBAC, MFA, session management, and least privilege

Penetration Testing

Testing cadence, scope, and results disclosure

Vulnerability Disclosure

Responsible disclosure policy and security contact

Privacy

Data collection, GDPR, CCPA rights, and legal basis

Data Protection

PII encryption, key management, and data minimization

Data Retention

Retention schedules, deletion policy, and backup windows

Subprocessors

Third-party vendors and data processors we use

Compliance

SOC 2 alignment, GDPR compliance, CCPA, and HIPAA

Data Processing Addendum

DPA summary, clauses, and transfer mechanisms

Incident Response

Severity levels, response SLAs, and notification policy

Trust Center Changelog

Version history of Trust Center updates

Private Documents

Request access to NDA-protected compliance documents

Private Documents

Request access to NDA-protected documents: pentest reports, full DPA, architecture diagrams.

Request Access →

Report a Vulnerability

Found a security issue? Disclose it responsibly via our security contact form.

View Disclosure Policy →

Security Questions

Enterprise procurement, security questionnaires, or general inquiries.

security@gorefer.io →