Snapshot 231673

Document
Trust center
URL
https://preset.io/trust-and-security/
Fetched
HTTP status
200
Content type
text/html; charset=UTF-8
Fetch mode
static
Size
360994 bytes
SHA-256 (raw)
a1b3037e9a050642c1f1c5e607d9e3fefaed5741abafbc82070d914e35bfb62d
SHA-256 (normalized text)
98176aef07b727c06844bfe8b6f111bfff526f77018f1588360094a2bfa61f08

Normalized text

Scripts and page chrome removed; this is what change detection compares.

Data & Network Security at Preset
Security is very important to us. We exceed the industry standards when it comes to protecting your organization.
Keeping You Safe
Data Security Features
We built our SaaS products with your security concerns in mind.
Secure Cloud Hosting
Preset Cloud runs on AWS with multi-tenant architecture. AWS is SOC2, ISO27001 and HIPAA compliant.
SSO with SAML
Enforce SSO authentication to your company domain(s) with the SAML SSO integration with Preset Cloud. We also support User Provisioning (SCIM) integration to manage team access.
Custom Roles
Create flexible policies that provide fine-grained access control with Role Based Access Controls (RBAC) to everything in Preset Cloud.
Encryption for Data in Transit
We secure all data in transit with Transport Layer Security (TLS) 1.2 or higher. Only secure cipher suites are enabled and they are reevaluated on a periodic basis.
Encryption for Data at Rest
Preset encrypts all of your data and metadata at rest using an industry standard AES-256 encryption algorithm.
Secure SDLC
Preset integrates security into every step of the Software Development Life Cycle (SDLC). Using manual and automated security controls we evaluate every line of code to protect our users from vulnerabilities and exploits.
Vulnerability Management
We actively monitor and remediate vulnerabilities reported from the Apache Superset community. You can report a vulnerability to security@preset.io.
Penetration Testing
We participate in independent 3rd-party penetration testing every 3 months.
Intrusion Detection Systems (IDS)
We protect your data with several layers of Intrusion Detection Systems (IDS) that continuously scan for threats like Malware, Ransomware and container exploits.
Workforce Security
Full time employees and contractors participate in background checks and security training. They acknowledge our security policies and sign confidentiality agreements. All access to systems is audited on a quarterly basis.
Endpoint Security
We use MDM on all endpoints and require employees to use a VPN to access our production systems. Strong passwords are enforced, as is Multi Factor Authentication (MFA).
Continuous Compliance Monitoring
We use continuous compliance monitoring with Vanta to ensure that Preset Cloud stays compliant with our compliance initiatives both inside and outside of the audit window.
Modern Compliance
Compliance Certifications, Standards & Regulations
We obtain industry-accepted certifications and comply with current industry standards and regulations so you can feel confident that your company and customer data remain secure and compliant.
SOC2 Type 2
Preset is SOC 2 Type 2 Certified. View our Letter of Attestation.
PCI-DSS Level 2
Preset is PCI-DSS Level 2 Compliant.
HIPAA
Preset is HIPAA Compliant. Learn more.
FAQ
Frequently Asked Questions
Cloud Security
Preset's SaaS solution runs on AWS. Our Managed Private Cloud (MPC) offering is available on AWS, GCP, and Azure.
You can choose among four different deployment regions to have Preset deployment close to your data sources and to be compliant with local regulations. The current options include:
US East 1 - Virginia, US
US West 2 - Oregon, US
Asia Pacific 1 - Tokyo, Japan
EU North 1 - Stockholm, Sweden
If you wish for a more specific region, Preset's Managed Private Cloud can be deployed in any AWS, GCP, or Azure region outside of Mainland China.
Preset workspaces are isolated by Role Based Access Controls (RBAC) that your organization's admin users specify. We have a unique application key for each workspace, which is used to ensure that traffic to the workspaces is isolated.
Auditing
We have multiple layers of monitoring, including at the cloud, network, and application levels.
Preset offers usage metrics that show which dashboards, charts, and other assets your team uses over time. Audit logs for all queries coming from Preset can also be added so you have granular views into which users initiated each individual query coming from your Preset workspaces.
Data Privacy & Security
Preset requires access to the databases that your organization wants to analyze within our analytics platform.
Preset uses Auth0 as our IDP. If SSO support is needed, we would need to set up SCIM.
Preset uses RBAC to manage user access and permissions. Your organization can use row-level security to set up fine-grained permissions for data access.
Preset supports Security Assertion Markup Language (SAML) Single Sign On (SSO) integration, so companies can use their existing identity management system and employees can sign in to Preset with their Identity Provider account. Supported identity providers include Azure, Google, and Okta. Read more here.
Database credentials are stored in a region-specific relational database service encrypted at rest. All traffic to the database is encrypted in transit. In the relational database service, each workspace has an associated database, which stores your organization's database credentials and is accessed by unique credentials.
On top of our database connections that are secured with Transport Layer Security (TLS) 1.2, Preset offers the following mechanisms for securing connections to your data sources:
SSH Tunneling
AWS PrivateLink
VPC Peering (Managed Private Cloud deployments only)
The results data is stored in a cache (AWS Elasticache for Redis), where the keys are prefixed by their respective workspace for isolation. In addition, the cache data is encrypted with an AES-128 workspace-specific key. By default, the cached data is stored for 24 hours; however, users can set custom timeouts as defined here.
You can detach any database connected to Preset Cloud and delete all datasets and queries. In addition, you can send a request to support@preset.io for account and user deletions.
Others
Preset tracks many metrics including uptime, MTTR, application error rates, release bugs, and many more.
An up-to-date list of sub-processors that Preset works with may be found here (updated April 2, 2026).
Take advantage of our robust security features
Start using Preset for free
Create an account