Protecting your data is foundational. ShipScience is SOC-2 compliant, provides SSO/RBAC, encryption in transit and at rest, audit trails, and governed retention.
Yes—We support SSO with common authentication applications.
TLS for data in transit; AES‑256 for data at rest. Key management is managed by AWS KMS, all credentials are automatically provisioned within AWS KMS.
Data is stored in AWS: us-west-2 and us-east-1.
ShipScience is SOC-2 Compliant. For a copy of our certification (including details, audit dates and certification types), please contact us.
Data retention is managed automatically based on our data retention policy (available upon request), and can be adjusted per client request. Data deletion requests can be made by contacting security@shipscience.com.
Yes—export is supported; we can schedule regular deliveries.
Yes—independent assessments with summarized results available (under NDA).