​
Governance

Reforge Insights establishes policies and controls, monitors compliance with those controls, and proves the security and compliacne to third-party auditors. Employees are trained on security best-practices, are required to review, understand, and accept policies, and are granted the minimal access possible to data and applications required to perform their job duties.

​
Compliance Standards

Reforge Insights is SOC 2 Type II compliant. Contact support@monterey.ai to request our latest report.

​
Data Security

  • Data is encrypted at rest and in-transit.
  • Data is backed-up regularly and stored long-term for recovery purposes.

​
Product Security

  • Penetration testing is performed annually by a third-party firm, covering all cloud infrastructure and application code.
  • Vulnerability scanning is performed continuously, and vulnerabilities are remediated per the following SLAs:
    • Critical: 14 days
    • High: 30 days
    • Medium: 60 days
    • Low: 90 days
  • Security training is provided to all employees annually.