Security at Topkey.
Your financial data is the business. Here is how we protect it, and where to find our policies, uptime and audit reports.
How we protect your data
- Encryption. Data is encrypted in transit (TLS 1.2 or later) and at rest, using the managed encryption of our cloud and database providers (AWS and PlanetScale).
- Access control. Multi-factor authentication is enforced for Topkey staff on Google Workspace, GitHub, AWS and our production hosting accounts.
- Backups. Databases are backed up automatically every day, and restores are tested periodically.
- Penetration testing. An independent third party tests Topkey every year.
- Continuous monitoring. Our infrastructure controls are monitored continuously through Oneleet.
- Reporting a concern. Email security@topkey.io and we will respond.
SOC 2 Type 2
Topkey's SOC 2 Type 2 audit is in progress. Once the report is issued, it is available on request through our Trust Center.
Where to look
- Trust Center: our security policies and the list of sub-processors.
- System Status: uptime and incident history.
- security@topkey.io: security questions and reports.
See the Topkey difference.
