A privacy monitor has to clear its own bar.
PrivacyRadar is built on a SOC 2-oriented architecture: isolation you can test, evidence you can verify, and administration you can audit. Part of the Trust Center.
Tenant isolation
Every tenant-scoped row carries the organization id; every query is scoped server-side from the verified session — never from client input. Isolation is covered by automated tests, with Postgres row-level security as defense in depth.
Evidence integrity
Artifacts are SHA-256 hashed at collection and stored content-addressed. Digests are re-verified on every download — tampering is detectable, and tampered bytes are never served.
Signed reports
PDF exports are Ed25519-signed with a published key fingerprint and shipped with a verification manifest, so counsel and regulators can verify authenticity offline.
Credential hygiene
API keys are stored as SHA-256 digests only, scoped to least privilege, per-credential rate limited, and instantly revocable. Webhook deliveries are HMAC-signed with replay protection.
RBAC and audit
Owner / admin / member / viewer roles with per-route permission checks. Authorization-sensitive actions append to an immutable audit log with no update or delete path.
Hardened operations
Secrets in a managed vault, non-root containers, global and per-credential rate limiting, security headers and strict CORS, dependency audits gating CI, and 90%+ coverage gates on detection-critical packages.
Scanning conduct
- Scans run only against assets your organization registers and is authorized to test.
- Default scans never submit forms — only allowlisted consent-banner controls. An optional Healthcare Surface form probe (off by default; org/asset allowlisted; synthetic non-PHI markers; never on public free scans) can submit test forms on healthData assets.
- Private networks, loopback, and cloud metadata endpoints are blocked targets for every fetch the platform makes.
- Page and depth budgets, per-page timeouts, and isolated browser contexts bound every scan.
Security review? Send us your questionnaire.
Architecture, threat model, and control documentation are ready for procurement.