Snapshot 258283
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Skip to navigationSkip to main content zeroheight security@zeroheight.com Privacy PolicyOpens in new tab zeroheight lets you to create a central hub for designers, engineers, product and marketing teams to work together on your design system zeroheight is generally considered a low security risk for several reasons: As a design system management platform, the data we store and process is generally either internal or public – you’re in control of what’s stored in zeroheight and we are not typically used to store sensitive business or personal data Robust access controls mean that you can control what’s exposed to whom, eg, by making documentation private We follow industry best practices around security like encryption and compliance with security standards including SOC 2 and ISO 27001, and regularly test our security posture including via third parties Company details for vendor onboardingOpens in new tab are available in the FAQOpens in new tab and we also have a guide on how to purchase zeroheightOpens in new tab in the ResourcesOpens in new tab Compliance SOC 2 Type II ISO 27001:2022 GDPR Resources View all Certifications and audits SOC 2 Type II Report (Dec 2025) SOC 2 Type II Report (Nov 2024) SOC 2 Type II Report (Nov 2023) View 1 more Billing and company details W-8BEN-E Form - 2025 - Zero Heigh Limited Zero Height Limited Bank Reference Letter (HSBC USD) zeroheight Billing/Shipping Form Opens in new tab Bank details (UK based USD account) View 2 more Security Vendor Security Alliance (VSA) Core Penetration Test (April 2026, updated October 2026) Penetration Test (March 2025, updated July 2025) View 2 more Policies and architecture Information Security Policy (AUP) Access Control Policy AI Policy Asset Management Policy View 15 more Other resources Penetration Test (March 2026, updated October 2026) Controls View all Infrastructure security Encryption key access restricted Unique account authentication enforced Production application access restricted View 15 more Infrastructure security controls Organizational security Asset disposal procedures utilized Production inventory maintained Portable media encrypted View 11 more Organizational security controls Product security Data encryption utilized Control self-assessments conducted Penetration testing performed View 2 more Product security controls Internal security procedures Continuity and Disaster Recovery plans established Continuity and Disaster Recovery plans tested Cybersecurity insurance maintained View 34 more Internal security procedures controls Data and privacy Data retention procedures established Customer data deleted upon leaving Data classification policy established Subprocessors View all Amazon Web Services • Processing Customer Content, Name, Email, IP address and location data of each Authorised User Amazon Web Services EMEA SARL, One Burlington Plaza, Burlington Road, Dublin 4, Dublin Secure hosting of data in the cloud OpenAI • Customer Content input into AI features OpenAI, L.L.C., 3180 18th Street, San Francisco, CA 94110 Service provider for AI-enabled functionality (an opt-in feature) FAQ View all Updates View all Security CVE-2026-111497 Node2Shell (Brotli) vulnerability Published October 29, 2026 We can confirm that none of our systems were negatively impacted by the CVE-2026-111497 Node2Shell (Brotli) vulnerability reported yesterday. Our node versions for production systems were updated before the announcement and there are no signs that an exploit was attempted on any of our systems. We continue to monitor for changes and new vulnerabilities. Security zeroheight Not Affected by Recent PHP Vulnerability Published October 23, 2026 We are aware of the recently disclosed PHP security vulnerability and can confirm that zeroheight is not affected. Our product and customer data remain secure, and no action is required from customers. We continue to monitor security developments and maintain measures to protect our platform and customers.