---
title: "Trust centre | Starhive"
description: "Learn how we approach security, privacy, and compliance at Starhive."
url: https://starhive.com/trust-centre
---

# Keeping your data safe. Always.

Learn how we approach security, privacy, and compliance at Starhive.

-   01
    
    ### SOC 2 Type II
    
    Starhive is SOC 2 Type II certified meaning we have adequate internal controls in place to protect our customers' data.
    
-   02
    
    ### GDPR
    
    Starhive is GDPR compliant, including, but not limited to, support for data rectification, the right to be forgotten, and a comprehensive audit trail.
    
-   03
    
    ### Data stored in Sweden
    
    Your workspace data is stored in Stockholm, Sweden. Web hosting (Vercel), Google services (maps, reCAPTCHA, sign-in, web fonts), error reports (Sentry) and Nova web searches (DuckDuckGo) can process data outside the EEA; our [Data Processing Addendum](https://starhive.com/legal/dpa) lists where.
    

## Our approach to security

At Starhive, we understand that trust is earned through transparency and demonstrated commitment to security.

We've built our platform with security as a foundational principle, not an afterthought. Our comprehensive security program protects your data through rigorous processes, industry-leading standards, and continuous monitoring.

## Quick links

[Status page](https://status.starhive.com/) ⋅ [Privacy policy](https://starhive.com/legal/privacy-policy) ⋅ [Terms of service](https://starhive.com/legal/cloud-terms-of-service)

## Our policies

Data residency & sovereignty

-   Your workspace data is stored in Stockholm, Sweden

-   We have full GDPR compliance with European data protection regulations
    
-   Web hosting (Vercel), Google services (maps, reCAPTCHA, sign-in, web fonts), error reports (Sentry) and Nova web searches (DuckDuckGo) can process data outside the European Economic Area (EEA); our [Data Processing Addendum](https://starhive.com/legal/dpa) lists each sub-processor and its location
    

Data protection

#### Encryption everywhere

-   All data encrypted at rest using industry-standard AES-256 encryption
    
-   All data encrypted in transit using TLS 1.2 or higher
    
-   Sensitive information and credentials managed through secure credential systems
    

#### Secure infrastructure

-   We have multi-account architecture separating development, staging, and production environments
    
-   Production data is completely isolated from development activities
    
-   We use private network architecture with network-level security controls
    

Infrastructure security

#### Private Network Architecture

-   Data runs in isolated networks with security controls
    
-   Only authorised services can communicate with each other
    

#### Continuous vulnerability scanning

-   We have a vulnerability scanning process of our infrastructure
    
-   Immutable infrastructure prevents tampering once deployed
    

#### Access Control

-   Fine-grained access policies enforce the principle of least privilege
    
-   Each service has only the permissions it needs
    

Application security

#### Bot protection

-   reCAPTCHA integration protects Starhive against automated attacks and abuse
    

#### Secure authentication

-   We implement a multi-service authentication framework with dedicated credentials
    
-   We use Google OAuth integration for secure user access
    

Operational security

#### Environment separation

-   We have strict separation between development, sandbox, and production environments
    

#### Automated security controls

-   Security policies are enforced automatically through infrastructure-as-code
    
-   This eliminates human error and ensures consistent protection
    

Backup & business continuity

We have implemented:  

-   Automated daily backups with point-in-time recovery
    
-   Multi-zone deployment ensuring high availability
    
-   A comprehensive disaster recovery plan that is tested yearly
    

Compliance & governance

#### Security Standards

-   SOC 2 Type II certified for security, availability, and confidentiality
    
-   CIS benchmark compliance
    
-   GDPR compliant data processing and privacy controls
    

#### Audit & Transparency

-   Comprehensive audit logging of all system activities
    
-   Regular internal and external security audits
    
-   Transparent incident reporting and communication
    

## Have a security or compliance question?

Get in touch and we will ensure our security experts get back to you shortly. Use this form to request processing agreements and information on our responsible disclosure program.

[Contact us](https://starhive.com/contact-us)

This Trust Centre content reflects Starhive's commitment to maintaining the highest standards of security, privacy, and compliance. Our security posture is continuously monitored and improved to address evolving threats and regulatory requirements.

Start today

## Describe it. Nova sets it up. Your team runs it.

Try Starhive free for 30 days, or let us show you around.

[Start free](https://app.starhive.com/signup)[Book a demo](https://starhive.com/book-your-free-demo)