Snapshot 37061
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Skip to navigationSkip to main content Arrows Since day one, security has been a top priority at Arrows. This trust center provides an overview of the data security practices and procedures we've implemented. [email protected] Privacy PolicyOpens in new tab Compliance SOC 2 GDPR Resources View all SOC 2 Type II Report AI Trust & Security Overview Penetration Test Controls View all Infrastructure security Unique production database authentication enforced Encryption key access restricted Unique account authentication enforced View 16 more Infrastructure security controls Organizational security Production inventory maintained Confidentiality Agreement acknowledged by contractors Confidentiality Agreement acknowledged by employees View 3 more Organizational security controls Product security Data encryption utilized Control self-assessments conducted Penetration testing performed View 2 more Product security controls Internal security procedures Cybersecurity insurance maintained Configuration management system established SOC 2 - System Description View 17 more Internal security procedures controls Subprocessors View all Heroku • Application hosting USA Hosts the Arrows application and backend services Amazon Web Services • Customer file hosting USA Storage for customer-uploaded files Postmark • Application email service USA Sends transactional and notification emails from the application HubSpot • CRM and email marketing USA Customer relationship management and marketing email Updates View all General Subpre Published September 17, 2026 We've made the following changes to our subprocessor list: Added to the list Cursor: Data querying Exa: Web scraping and search OpenRouter: Backend support of AI-powered functionality ElevenLabs: Audio processing WorkOS: Authentication and single sign-on Stripe: Subscription billing and payments Removed Segment Metabase Hightouch Hotjar Parallel Updated Cloudflare: Purpose expanded to "Web application firewall, backend services, user file hosting, and email delivery." You can view our full list of subprocessors at https://trust.arrows.to/subprocessorsOpens in new tab General Penetration testing renewed Published August 17, 2026 We have completed our 2026 penetration testing and all findings have been remediated. Executive summary report has been updated in the trust center. General Subprocessor update Published March 27, 2026 We are adding a new subprocessor: PlanetScale: Application database You can view our full list of subprocessors at https://trust.arrows.to/subprocessorsOpens in new tab General AI Trust & Security Overview has been updated Published March 27, 2026 We have updated our AI Trust & Security Overview with clarified language and refreshed details. No material policy changes were made.