Safe, secure, and private.
We’ve designed our all-in-one platform with security as a foundational principle.
Security by Design
Gorelo implements security by design in all aspects of our service:
End-to-End Encryption
All data is encrypted in transit using industry-standard TLS protocols and at rest using AES-256 encryption.
Zero Visibility into Customer Data
Our systems are designed to process only metadata signals, not your actual data. Your sensitive information remains private.
Data Classification
We automatically classify data to ensure appropriate security controls are applied based on sensitivity.
Azure-Powered Infrastructure
Built on Microsoft Azure’s enterprise-grade infrastructure, Gorelo benefits from multiple layers of security and compliance capabilities.
Infrastructure Security
Gorelo implements security by design in all aspects of our service:
Secure Development
Our backend is developed in C# .NET, employing secure coding practices and regular code reviews.
Credential Management
All system credentials are stored in Azure Key Vault, ensuring secrets are never exposed in code or configuration files.
Continuous Monitoring
Our infrastructure and applications are continuously monitored for suspicious activities and potential vulnerabilities.
Regular Backups
Continuous backups of all customer data ensure business continuity and rapid recovery if needed.
Access Controls
Gorelo implements security by design in all aspects of our service:
Role-Based Access Control
Fine-grained permissions ensure users can only access the information and features they need.
Authentication Security
Support for SSO, MFA, and advanced authentication methods.
Audit Logging
Comprehensive logging of all access and administrative actions for accountability.
Compliance
Gorelo implements security by design in all aspects of our service:
SOC 2 Certification
We’ve completed our SOC 2 Type I attestation after an independent audit of our controls for protecting customer data.
Regulatory Alignment
Our architecture and processes align with industry best practices and regulatory requirements.
Transparent Practices
We’re committed to being transparent about our security practices and continuously improving them.
Shared Responsibility
Security is a partnership between Gorelo and our customers. We provide the secure platform, while helping you implement best practices for your organization’s unique security needs.
Security Updates
We regularly update our security measures to address evolving threats and technologies. Our team stays informed about the latest security developments to ensure your data remains protected.
For more information about our security practices or to report a security concern, please contact
security@gorelo.io