Legal documents
Information, policies, and other documents regarding terms of use and privacy within Pluto
Data security & privacy
is our top priority
At Pluto, we've built data security into our platform since day one. With robust security measures in place, including encryption at rest and in transit, SOC2 Type II reports, GDPR readiness, and an integrated Trust Center monitoring all components in real-time, we are committed to ensuring that your data remains secure and compliant.
Security overview
SOC2 compliant
Pluto maintains an AICPA System and Organization Controls (SOC) SOC 2 Type 2 report, and performs continuous monitoring on adherence to SOC 2 controls. Visit our Trust Center to see our real-time compliance status.
End-to-end data encryption
Security is built into our data transfer mechanisms and critical to our business. Pluto protects your data by encrypting it both in transit and at rest. AES256 is used for encryption at rest and storage and TLS is used for encryption in transit.
GDPR compliant
Pluto is fully GDPR compliant, with robust data protection controls continuously monitored and enforced, and a dedicated GDPR EU representative ensuring adherence to EU data regulations. Contact our team to learn more about our comprehensive compliance measures.
Privacy
Pluto is committed to user privacy and provides a high standard of privacy protection to all of our users and clients. We apply stringent individual privacy protections through the use of role-based permissions and access controls, in accordance with Pluto’s data security and privacy controls.
Trust Center
Pluto's platform is monitored in real-time for security and compliance for controls in infrastructure security, organizational security, product security, internal security procedures, and data and privacy. Visit our Trust Center for a detailed view of Pluto's compliance status and certifications, policies, and other resources.
IT & security audits
Pluto regularly undergoes IT and security audits, as well as application penetration testing, from enterprise clients and other third-parties. We are happy to work with your IT and security team to align on your specific compliance needs.