Sengo Trust Center — Enterprise Security & Compliance

Sengo is committed to the highest standards of security, privacy, and compliance. This Trust Center documents how we protect customer data across our products, infrastructure, and partner platforms. Sengo aligns with SOC 2, ISO 27001, GDPR, PIPEDA, and HIPAA practices through the platforms we implement on behalf of our clients.

• SOC 2 Type II readiness
• ISO 27001 aligned controls
• GDPR & PIPEDA compliant data handling
• HIPAA-ready partner platforms

Trusted Platform Partners

Sengo does not directly hold the certifications below. We implement and integrate enterprise platforms whose vendors maintain these certifications and publish their own Trust Centers.

• Coveo — SOC 2 Type II, ISO 27001, GDPR, HIPAA. Trust Center
• Sitecore — SOC 2, ISO 27001, GDPR. Trust Center
• Optimizely — SOC 2 Type II, ISO 27001, GDPR. Trust Center
• Kentico — ISO 27001, GDPR. Trust Center
• Contentful — SOC 2 Type II, ISO 27001, GDPR. Trust Center
• Storyblok — SOC 2, ISO 27001, GDPR. Trust Center
• Netlify — SOC 2 Type II, GDPR, HIPAA. Trust Center
• ai12z — Responsible AI, data privacy, user consent. Trust Center

Security Posture

Defense-in-depth across application, infrastructure, and operational layers, with continuous monitoring and least-privilege access.

Compliance

Programs aligned with SOC 2, ISO 27001, GDPR, PIPEDA, and HIPAA via certified partner platforms.

Infrastructure

Hosted on enterprise cloud providers with encryption in transit and at rest, network segmentation, and DDoS protection.

Data Handling

Customer data is minimized, encrypted, access-controlled, and retained only as long as needed.

Governance & Legal

Policies, vendor risk management, incident response, and legal agreements (DPA, SCCs) covering customer obligations.

Security FAQ

For security inquiries, contact [email protected].