Skip to main content
Thread Transfer Logo
Security-First Platform

Enterprise-Grade Security

Your data is protected with industry-leading security practices, compliance certifications, and continuous monitoring.

Security Practices

Multiple layers of protection keep your data secure.

Data Encryption

  • AES-256 encryption at rest
  • TLS 1.3 for data in transit
  • End-to-end encryption for sensitive data
  • Key rotation every 90 days

Infrastructure Security

  • Hosted on SOC 2 certified data centers
  • Multi-region redundancy and failover
  • DDoS protection and WAF
  • Automated security patching

Access Controls

  • Multi-factor authentication (MFA)
  • Role-based access control (RBAC)
  • Just-in-time access provisioning
  • Automated access reviews

Compliance & Auditing

  • SOC 2 Type II certified
  • GDPR compliant data processing
  • Immutable audit logs
  • Annual third-party audits

Compliance Certifications

Independently verified security and compliance standards.

SOC 2 Type II

Independently audited for security, availability, and confidentiality controls.

Active

GDPR

Full compliance with EU data protection regulation.

Active

ISO 27001

Information security management aligned with international standards.

Aligned

Continuous Security

Proactive security testing and vulnerability management.

Penetration Testing

Quarterly third-party penetration tests by certified security firms.

Bug Bounty Program

Active bug bounty program rewarding security researchers. Report to security@thread-transfer.com

Vulnerability Management

Automated scanning, 24-hour SLA for critical vulnerabilities, monthly security updates.

Data Handling

How we protect and manage your data.

Where is data stored?

All data is stored in SOC 2 certified data centers in the EU (Frankfurt) and US (N. Virginia) regions. You can choose your primary region.

How long is data retained?

By default, data is retained for 90 days. Enterprise customers can configure custom retention policies from 30 days to 7 years.

Can I delete my data?

Yes. You can delete individual items or your entire account at any time. Deletion is permanent and typically completes within 72 hours.

Is data encrypted?

Yes. All data is encrypted at rest with AES-256 and in transit with TLS 1.3. Encryption keys are rotated every 90 days.

Report a Security Issue

Found a vulnerability? We take security seriously. Report issues to our security team and we'll respond within 24 hours.

Contact Security Team