Trust Center

Trust at ValidTeam

ValidTeam is built for teams that need visibility into how their data is handled. This page lists our security program, sub-processors, compliance status, and a 90-day window into reliability incidents.

Compliance

  • SOC 2 Type IIIn progress

    Type II observation window is in progress with an independent auditor. Report available under NDA on request.

    Expected: 2026-09-01

  • ISO/IEC 27001Planned

    Implementation of the ISMS is scheduled to begin after SOC 2 Type II completes. We will publish stage updates as gates are cleared.

    Expected: 2027-03-01

  • GDPR / UK GDPRAchieved

    Standard contractual clauses and a Data Processing Addendum (DPA) are available for download below. EU and UK data subject requests are honored within statutory deadlines.

Sub-processors

We use the following sub-processors to run ValidTeam. Material changes are announced 30 days before they take effect.

Amazon Web Services (AWS)
Primary cloud infrastructure: compute, storage, and database hosting.
US (us-east-1), EU (eu-west-1)
Google Cloud Platform (GCP)
Secondary compute and storage for AI workloads.
US (us-central1), EU (europe-west4)
Anthropic
Claude API for AI assistants, summarization, and search.
US
OpenAI
Optional fallback LLM provider when configured by the workspace.
US
GitHub (OAuth)
OAuth identity provider and source-control integration.
US
Resend
Transactional email delivery (notifications, invites).
US
Amazon SES
Fallback transactional email delivery.
US, EU
Sentry
Error tracking and release health monitoring.
US, EU
LiveKit
Realtime audio/video for in-product calls and presence.
Global edge
CloudflarePlanned
CDN, DDoS protection, and DNS (planned).
Global edge

Documents

Status & uptime

ValidTeam Status

Recent incidents (last 90 days)

No incidents reported in the last 90 days.

Security contact

Report a vulnerability or ask a security question at security@rumiamanage.com.