Your customers trust you with their business. You can trust us with yours.

Superhawk sits on top of your most sensitive revenue data. We hold ourselves to the highest standards of security and integrity, verified by independent auditors and built into every layer of the product.

SOC 2

SOC 2 Type II

Independently audited controls for security, availability and confidentiality.

ISO 27001

ISO 27001:2022

A certified information security management system, reviewed every year.

GDPR

GDPR

Personal data handled lawfully and transparently, with EU data residency available.

Integrity is a product decision.

Every choice we make about your data starts from one question: would we be comfortable explaining it to your customer?

Never used for training

Your data is never used to train models. Not ours, not anyone’s.

Read-only by default

Superhawk reads from your source systems and never writes back to them.

Permissions you already set

Access is inherited from your source systems, with role-based controls on top.

Every action on the record

Every read and write is logged, with seven-year retention.

Built for the questions your auditors will ask.

EncryptionAES-256 at rest, TLS 1.3 in transit
PermissionsInherited from source systems plus an RBAC overlay
AuditEvery read and write logged, 7-year retention
Data residencyUS, EU, or bring your own VPC
Model trainingYour data is never used to train models
ComplianceSOC 2 Type II, ISO 27001:2022, GDPR
Penetration testingQuarterly, by third-party firms
Incident responseCustomer notification within 24 hours
No lock-inSource systems untouched; full graph exports on request
Conflicting dataSurfaced with provenance, never silently overwritten

Everything your security team needs, in one place.

Reports, policies, subprocessors and our latest audit results are available in the Superhawk Trust Center.

Visit Trust Center