Trust Center
Trust Center
RequirementsHub is built for teams who take their work seriously — and for the security reviewers, procurement teams, and compliance officers who evaluate the tools those teams use. This Trust Center is our commitment to transparency about how we handle your data, secure our platform, and respond when things go wrong.
Security & Compliance at a Glance
| Area | Status |
|---|---|
| Encryption in transit | TLS 1.3 |
| Encryption at rest | AES-256 (Supabase / AWS) |
| Authentication | Passwordless magic link; MFA on roadmap |
| Tenant isolation | Row-level security enforced at database layer |
| SOC 2 | In evaluation — audit initiation planned within 6 months |
| GDPR | DPA available — requirementshub.ai/trust/dpa |
| HIPAA | Not supported — do not submit PHI |
| Penetration testing | Planned concurrent with SOC 2 preparation |
| Subprocessor list | Published — requirementshub.ai/trust/subprocessors |
| Incident notification SLA | 72 hours from confirmed breach |
| Data export | Self-service at requirementshub.ai/account/data |
Trust Center Pages
- Security (/trust/security)
Infrastructure security, access controls, SDLC, vulnerability disclosure, BCP/DR
- Privacy Policy (/trust/privacy)
What we collect, how we use it, your rights
- Data Handling (/trust/data-handling)
Data classes, subprocessors, encryption, retention schedule
- Subprocessor List (/trust/subprocessors)
Every third-party provider that processes customer data, with purpose and region
- Acceptable Use Policy (/trust/acceptable-use)
Permitted use, prohibited content categories, enforcement
- Incident Response (/trust/incident-response)
Severity levels, notification SLAs, how to report a vulnerability
- Data Processing Agreement (/trust/dpa)
Controller/processor roles, SCCs for EEA/UK transfers, security measures annex
- Compliance Posture (/trust/compliance)
SOC 2 roadmap, GDPR, HIPAA, CCPA, export controls
Contact Matrix
| Purpose | Contact |
|---|---|
| Security vulnerabilities, incidents, security questionnaires | security@requirementshub.ai |
| Privacy rights requests, data deletion, CCPA/GDPR inquiries | privacy@requirementshub.ai |
| DPA requests, legal agreements, compliance documentation | legal@requirementshub.ai |
| Enterprise sales, data residency, custom requirements | sales@requirementshub.ai |
Response times: security matters acknowledged within 48 hours; general inquiries within 3 business days.
Last reviewed: June 2026 · Next scheduled review: December 2026
Last updated: June 2026