01
End-to-End Encryption
All data is encrypted in transit (TLS 1.3) and at rest (AES-256) to ensure your content and credentials remain secure.
Security
Your campaigns. Your approvals. Your audit trail.
Enterprise marketing software with explicit gates — no silent publishing, no exposed provider keys, no claims without evidence.
SOC 2 Type II
Certified
256-bit
Encryption
99.99%
Uptime SLA
GDPR
Compliant
Enterprise-grade
Security built into the operating model
Protection is not a bolt-on checkbox — it is part of how Synthex handles intake, planning, approval and production.
02
SOC 2 Type II Compliance
Our infrastructure and processes undergo regular third-party audits to meet the highest security standards.
03
GDPR & Privacy Compliant
Full compliance with GDPR, CCPA, and international data protection regulations. Your data, your rights.
04
99.99% Uptime Guarantee
Enterprise-grade infrastructure with redundancy, failover, and 24/7 monitoring to keep your marketing running.
Data protection
Privacy by design at every stage
We follow privacy-by-design principles to ensure your data is protected at every stage of collection, processing, and storage.
01
Data Minimization
We only collect data necessary to provide our services. No unnecessary tracking or profiling.
02
User Control
You own your data. Export, delete, or modify your information at any time through your account settings.
03
Transparent Processing
Clear documentation of how we process, store, and use your data. No hidden practices.
04
Secure Storage
Data stored in SOC 2 certified data centres with encrypted backups and strict access controls.
Infrastructure
Secure infrastructure stack
Built on industry-leading platforms with multiple layers of security and redundancy.
Hosting Platform
Vercel (AWS)
SOC 2, ISO 27001, PCI DSS
Database
PostgreSQL (Supabase)
Encrypted at rest, regular backups
Authentication
JWT + OAuth 2.0
bcrypt hashing, secure tokens
AI Processing
OpenRouter API
Encrypted API calls, no data retention
Access control
Authentication and permissions
Multi-layered authentication designed to protect accounts while maintaining a clear operator experience.
JWT tokens with secure httpOnly cookies
OAuth 2.0 support (Google, GitHub, LinkedIn)
Role-based access control (RBAC)
Multi-factor authentication (MFA) available
Comprehensive audit logging for all actions
Automatic session expiration and renewal
IP-based anomaly detection
Rate limiting and brute-force protection
Compliance
Certifications and standards
SOC 2 Type II
Service Organization Control
CertifiedGDPR
General Data Protection Regulation
CompliantCCPA
California Consumer Privacy Act
CompliantISO 27001
Information Security Management
In ProgressResponsible disclosure
If you discover a security vulnerability, please report it responsibly so we can protect our users.
security@synthex.socialBug bounty: Qualifying disclosures may be eligible for rewards depending on severity and impact.
Production stays controlled.
Every public page reflects the same operating principle: evidence first, human approval before output.
No public publishing without approval
No ad spend without explicit gate
No client claims without evidence
No provider keys exposed in UI
Start with the plan. Move to production when it is clear.
Request pilot access to the AI marketing workspace built for evidence-backed campaign planning and approval-gated execution.