Enterprise-Grade Security
You Can Trust

All data stored in TaptiPM is encrypted at rest using AES-256 encryption, the same standard used by financial institutions and government agencies. Data in transit is protected with TLS 1.3 across every connection. Enterprise customers can bring their own encryption keys (BYOK) for full control over key management and rotation policies.

Yes, TaptiPM is fully compliant with the EU General Data Protection Regulation. We offer a Data Processing Agreement (DPA) to all customers, support all data subject rights including access, rectification, and erasure requests, and provide EU-hosted data regions so your data never leaves European infrastructure.

TaptiPM supports Single Sign-On (SSO) via both SAML 2.0 and OpenID Connect (OIDC), integrating with providers like Okta, Azure AD, and Google Workspace. Multi-factor authentication (MFA) can be enforced organization-wide. Administrators can configure password complexity policies, session timeout rules, and device trust requirements.

You choose your data region during onboarding: United States, European Union, or Asia-Pacific. Once selected, all primary data and backups remain within that region to meet data sovereignty requirements. Cross-region replication is available as an opt-in feature for disaster recovery, with full transparency on where replicas reside.

TaptiPM operates a 24/7 Security Operations Center (SOC) staffed by dedicated security engineers. We maintain a formal incident response plan aligned with industry best practices. In the event of a confirmed incident, affected customers are notified within 24 hours with a detailed assessment. Post-incident reports with root cause analysis and remediation steps are shared within 5 business days.