Security
Security for regulated industries.
Arch is built for companies where security review decides the vendor list. SOC 2 Type II audited, with the controls enterprise auditors look for.
Certifications
The standards your auditors expect.
Attestation
SOC 2 Type II
Independently audited controls for confidentiality, integrity, and availability. Renewed annually.
External
Trust Center
Security documentation, compliance reports, and our current security status.
Visit Trust Center
How we protect your data
Protection that matches the sensitivity of the data.
01 · At rest
AES-256 encryption
All data at rest is encrypted with AES-256, the standard used by banks and governments.
02 · In transit
TLS 1.2 minimum
All traffic between your systems and Arch uses TLS 1.2 or higher.
03 · Infrastructure
AWS infrastructure
All data is stored on Amazon Web Services, under AWS physical and infrastructure controls.
04 · Access
Role-based controls
Access is limited to the roles that need it.