Snapshot 60203

Document
Trust center
URL
https://zight.com/trust-security
Fetched
HTTP status
200
Content type
text/html
Fetch mode
static
Size
80772 bytes
SHA-256 (raw)
29bf2d27550f8dfeaf133c806aece1cbb69879c61f68675be481ad5ee5653e9c
SHA-256 (normalized text)
85979f11d3203e6ae7e9491f7f5448ae7eb1d73e6ad71f780b2215319332d869

Normalized text

Scripts and page chrome removed; this is what change detection compares.

Trust & Security
Privacy and security you can trust
Multiple layers of security protect your team's and customers' data — from 256-bit encryption in transit to enterprise-grade access controls and audited compliance.
Sign up free Talk to sales
SOC 2 Type II Independently audited
GDPR EU compliant
HIPAA Scale plan, BAA available
AWS S3 Custom Bring your own bucket
Trusted by 5m+ people who would rather show than tell
Case study
Security & compliance
Built to meet the bar enterprises already trust
SOC 2 Type II certified
Independently audited controls for security, availability, and confidentiality — not a self-assessment.
Enterprise-grade access control
SSO with SAML provisioning and domain lockdown keep every employee inside your security settings — not just the ones who remember to opt in.
Data retention on your terms
Every piece of content can be public, org-only, or password-protected, and set to expire or delete itself after a date you choose.
Encrypted in transit and at rest
256-bit TLS 1.2 protects data moving between your devices and Zight's servers, and the encryption keys are managed by AWS Key Management Service.
Hardened infrastructure
Built on AWS and audited against ISO 27001, 27017, 27018, 9001, SOC 1/2/3, and PCI DSS 3.2 — the same bar enterprises already trust.
Visibility and control
Enterprise plans add document-sharing restrictions, IP allowlisting, and identity-provider integration, so admins can enforce policy without slowing teams down.
Read more about our Enterprise Solution, or our Privacy Policy and Terms of Service.
"It has excellent security features. First, it was simple to set up storage on our company servers instead of the Zight cloud, meaning that all of our captures remain under our control. This allows for capturing more sensitive information securely. Second, it's possible to set security on any capture to password-protect or otherwise restrict access to it."
Karen Goeller
Software Delivery Leader, biBerk Business Insurance
FAQ
Questions people ask first
Our DPA is available for review — contact us at support@zight.com to request it.
Zight runs on AWS, which publishes its practices at aws.amazon.com/security — that covers the infrastructure layer Zight is built on.
Keep your data secure without slowing your team down
SOC 2 Type II certified, GDPR-ready, and built on AWS. Want to see everything else Zight does? See all features.
Sign up free Talk to sales