Snapshot 13905
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Skip to navigationSkip to main content zeroheight security@zeroheight.com Privacy PolicyOpens in new tab zeroheight lets you to create a central hub for designers, engineers, product and marketing teams to work together on your design system zeroheight is generally considered a low security risk for several reasons: As a design system management platform, the data we store and process is generally either internal or public – you’re in control of what’s stored in zeroheight and we are not typically used to store sensitive business or personal data Robust access controls mean that you can control what’s exposed to whom, eg, by making documentation private We follow industry best practices around security like encryption and compliance with security standards including SOC 2 and ISO 27001, and regularly test our security posture including via third parties Company details for vendor onboardingOpens in new tab are available in the FAQOpens in new tab and we also have a guide on how to purchase zeroheightOpens in new tab in the ResourcesOpens in new tab Compliance SOC 2 Type II ISO 27001:2022 GDPR Resources View all Certifications and audits SOC 2 Type II Report (Dec 2025) SOC 2 Type II Report (Nov 2024) SOC 2 Type II Report (Nov 2023) View 1 more Billing and company details W-8BEN-E Form - 2025 - Zero Heigh Limited Zero Height Limited Bank Reference Letter (HSBC USD) zeroheight Billing/Shipping Form Opens in new tab Bank details (UK based USD account) View 2 more Security Vendor Security Alliance (VSA) Core Penetration Test (March 2026, updated August 2026) Penetration Test (March 2025, updated July 2025) View 3 more Policies and architecture Information Security Policy (AUP) Access Control Policy AI Policy Asset Management Policy View 15 more Controls View all Infrastructure security Unique production database authentication enforced Encryption key access restricted Unique account authentication enforced View 14 more Infrastructure security controls Organizational security Asset disposal procedures utilized Production inventory maintained Portable media encrypted View 11 more Organizational security controls Product security Data encryption utilized Control self-assessments conducted Penetration testing performed View 1 more Product security control Internal security procedures Continuity and Disaster Recovery plans established Continuity and Disaster Recovery plans tested Cybersecurity insurance maintained View 30 more Internal security procedures controls Data and privacy Data retention procedures established Customer data deleted upon leaving Data classification policy established Subprocessors View all Amazon Web Services • Processing Customer Content, Name, Email, IP address and location data of each Authorised User Amazon Web Services EMEA SARL, One Burlington Plaza, Burlington Road, Dublin 4, Dublin Secure hosting of data in the cloud OpenAI • Customer Content input into AI features OpenAI, L.L.C., 3180 18th Street, San Francisco, CA 94110 Service provider for AI-enabled functionality (an opt-in feature) FAQ