Snapshot 222161

Document
Trust center
URL
https://www.scalekit.com/trust-center
Fetched
HTTP status
200
Content type
text/html; charset=utf-8
Fetch mode
static
Size
62087 bytes
SHA-256 (raw)
ddde36789010ffb6f6f99c1b860e69c21055d59836ab8a0225c011bb443aaafe
SHA-256 (normalized text)
a6b81ef84f3171dfd334f48b247e8f91190f8cd34a7bc290cf1d4c2354d8c8b2

Normalized text

Scripts and page chrome removed; this is what change detection compares.

Security and trust for every agent action
How Scalekit protects credentials, tool calls and user data across AgentKit and every connected app
SOC 2 Type 2 and ISO 27001 certified
GDPR and CCPA compliant
Annual 3rd-party penetration tests
Data encryption with HTTPS/TLS 1.3
Multi-region Data residency
Scalekit offers dedicated clusters in Frankfurt (EU) and Los Angeles (NA), ensuring low latency, strict data boundaries, and region-specific encryption.
Our commitment to
privacy and security
Access compliance reports and certificates
Data Protection Agreement
Learn about our commitments to data security and privacy.
Read more
Privacy Policy
Understand how we collect, use, and protect your personal information.
Read more
Terms of Service
Understand the rules and guidelines governing your use of our services.
Read more
Subprocessors
Understand how we work with third-party service providers to process your data.
Read more
Frequently asked questions
Expand all
Collapse all
What certifications does Scalekit have?
Scalekit holds ISO 27001 and SOC2 certifications and conducts regular VAPT assessments to maintain high-security standards. Scalekit is also GDPR and CCPA compliant.
What data do you store?
Scalekit stores only the data sent from identity providers. For more information, view our Privacy Policy
Where is customer data stored?
For North America, customer data is stored in U.S. data centers (Los Angeles). For Europe, all customer data remains within our EU data center in Frankfurt.
Is your data encrypted?
Yes, Scalekit uses HTTPS / TLS 1.3 to protect data in transit and at rest, safeguarding your information from unauthorized access.
Pll / User data
Secure Cache with TTL
Client Secrets / API Keys
Hashed using Bcrypt
End customer data
Encrypted using Keys via GCP CKM
Tokens / Sessions
Stateless and verified using Signature
Transport
HTTPS/SSL for all APIs and SSL/TLS for all internal connections.
Database / Disk
AES-256 Encryption at Rest
Is Scalekit GDPR and CCPA compliant?
Scalekit complies with GDPR and CCPA regulations. If you need to request data deletion, please contact security@scalekit.com.
What happens to my data after account termination?
Data is retained for 30 days post-termination and is then permanently deleted unless restoration is requested during that period.
Can you provide a pen test report?
The latest penetration test report can be provided to customers after signing an NDA. Contact us at security@scalekit.com for more details.
Where can I find the list of data subprocessors?
Please see our [list of subprocessors] for the most up-to-date information
Are you HIPAA eligible?
Yes we are. Here's the implementation guide.
How can I report security issues?
Please report security issues by emailing us at security@scalekit.com. We address them as quickly as possible.
The Auth Stack
for AI applications
hi@scalekit.com
16192 Coastal Hwy Lewes,
DE 19958
Join our community
Scalekit in action
Start FreeTalk to an EngineerPricingLogin
Modular Auth
MCP AuthAgent AuthSSOSCIM
Full Stack Auth
User & Org ManagementAuth MethodsAPI AuthRoles & PermissionsCustomizationEnterprise Auth
Extensibility
Auth workflowsIntegrations
Compare
Scalekit vs Auth0Scalekit vs StytchScalekit vs DescopeScalekit vs CognitoScalekit vs ClerkScalekit vs WorkOS
Industry Reports
State of Auth 2025Enterprise MCP patterns
Auth Guides
MCP AuthSingle Sign-onPasswordlessSCIMOAuth
Resources
DocsAPI ReferenceBlogRelease NotesSDKs
Company
LegalTrust CenterCustomers
Scalekit in action
Start FreeTalk to an EngineerPricingLogin
Compliance
Follow us on
All systems operational
Copyright © 2026.
ScaleKit Inc. All rights reserved
Winning enterprise customers shouldn't be hard.
Book a demo