Skip to main content
Encrypted, isolated and compliant. From encryption to access management, Archways enforces rigorous standards to ensure your data stays secure, private and compliant. Go to Trust Center → We are committed to maintaining compliance with the most rigorous international safety and security standards. All infrastructure and sub-processors used are ISO 27001 and SOC 2 Type 2 compliant.

​
​SOC 2

Our platform is SOC 2 Type II audited, meaning we meet the highest standards for security, availability and data confidentiality. We maintain strict internal controls and conduct regular independent audits.

​
​GDPR

We are fully compliant with the General Data Protection Regulation. User data is processed lawfully, transparently and for a specific purpose. Our infrastructure is designed for privacy-first handling of personal data. ​How we protect your data
  • Encryption everywhere — Data is encrypted both at rest and in transit using industry-standard AES-256 encryption.
  • 24/7 monitoring — Systems are monitored around the clock for security threats and unusual activity.
  • Regular testing — Third-party security experts regularly test our systems for vulnerabilities.
  • Data usage — Your data stays private and is never used to train any AI models.
  • Access & authentication — SSO and SAML support, multi-factor authentication and role-based access control.
  • Data privacy — GDPR compliant, with DPAs available for enterprise customers.

​
​Quick answers

Is Archways SOC 2 compliant? Yes — Archways is SOC 2 Type II audited, with regular independent audits and strict internal controls covering security, availability and data confidentiality. Does Archways use customer data to train AI models? No. Customer data stays private to their workspace and is never used to train any AI models.