Yes—We support SSO with common authentication applications.

TLS for data in transit; AES‑256 for data at rest. Key management is managed by AWS KMS, all credentials are automatically provisioned within AWS KMS.

Data is stored in AWS: us-west-2 and us-east-1.

ShipScience has successfully completed our SOC 2 Type II certification.

The independent audit was conducted by Prescient Security and validates the design and operating effectiveness of our controls under the AICPA Trust Services Criteria.

Our compliance program is supported by Vanta, which helps us continuously monitor and strengthen our security posture.

Our customers trust ShipScience with sensitive shipping, invoice, claims, and payment data. Achieving SOC 2 Type II reflects our commitment to protecting that data with disciplined controls, infrastructure maturity, and independent oversight.

For a copy of our certification (including details, audit dates and certification types), please visit our Trust Center.

Data retention is managed automatically based on our data retention policy (available upon request), and can be adjusted per client request. Data deletion requests can be made by contacting security@shipscience.com.

Yes—export is supported; we can schedule regular deliveries.

Yes—independent assessments with summarized results available (under NDA).

Email security@shipscience.com or use the contact form; we’ll respond per our incident SLAs.