Comprehensive Security To Protect Your Strategic Information, Users & Privacy

Enterprise Security Comes Standard

ClearPoint employs a cloud deployment model with industry-standard security controls including firewalls, Amazon GuardDuty threat detection, and rigorous change management processes. Our distributed architecture scales horizontally to meet growing demands while maintaining peak security.

All critical processes in our production environment are documented and automated. We follow formal change management procedures with testing in separate environments before any production deployment.

Your data are stored in fully redundant databases with encrypted nightly full backups with frequent differential and transaction-log backups using AES-256 encryption, stored in geographically separated locations for maximum resilience.

Want more information on security?

Schedule a security review

SOC 2 Type II (Security), TX-RAMP Level 1

Third-party validated security standards and regular independent audits demonstrate our commitment to maintaining the highest levels of data protection and operational excellence.

GDPR padlock icon with a check mark shield

CCPA California Consumer Privacy Act seal

Compliance with Global Privacy Regulations

Supports customer compliance with GDPR and CCPA (standard DPA with SCCs available). Customer data is never used to train AI models.

2FA (two-factor authentication) icon with a padlock and shield

Enterprise-Grade Authentication Options

Flexible, enterprise-grade access management that seamlessly integrates with your existing security infrastructure while providing granular control over who sees what in your ClearPoint instance

Resilient, Redundant, and Secure Infrastructure

Customer data is hosted in AWS U.S. regions. AES-256 encryption at rest and TLS 1.2+ in transit, redundant infrastructure, and continuous monitoring create multiple layers of defense to protect your strategic data with industry-leading reliability and performance.

scalable security

Security That Scales With Your Organization

ClearPoint delivers comprehensive security while enabling seamless collaboration across your organization

ClearPoint initiative page in dark mode with owner, analysis, milestones, Gantt chart and a dated analysis history panel



Advanced Authentication

Secure your ClearPoint instance with multiple layers of authentication protection:

Two-Factor Authentication (2FA)
SAML-based Single Sign-On (SSO)
Microsoft Entra ID and other identity providers via SAML 2.0
Customizable password policies
Automatic session timeout after 60 minutes of inactivity



Element-Level Permissions

Our unique granular permission system ensures users see exactly what they need:

Role-based access control (RBAC)
Element-specific permissions
Department-level data isolation
Custom user groups and rules
Audit trail of logins and changes



Data Encryption

Industry-standard encryption protects your data at every stage:

AES-256 encryption at rest
TLS 1.2+ for data in transit (TLS 1.3 supported)
Encrypted database backups
Secure API communications

‍



Compliance & Auditing

Meet regulatory requirements with comprehensive compliance features:

Complete audit logging
Data retention policies
GDPR data portability
Right to erasure support
Compliance reporting tools



Security Monitoring

Proactive security measures to protect against threats:

Continuous automated monitoring (Amazon CloudWatch, AWS Config)
Amazon GuardDuty threat detection
Annual third-party penetration testing
Automatic blocking of IPs GuardDuty flags
Incident Manager with a designated deputy and a weekly on-call rotation



Business Continuity

Ensure your data are always available and protected:

Redundant data centers
Automated nightly backups
Disaster recovery planning
99.7% uptime SLA
Geographic data replication

Want to learn how security scales?

Schedule a security review

Frequently Asked Questions

Find answers to your questions right here, and please don’t hesitate to contact us if you can’t find what you’re looking for.

What security certifications does ClearPoint have? ‍

ClearPoint holds a SOC 2 Type II report covering the Security trust services criterion, and is TX-RAMP Level 1 certified. ClearPoint supports customer compliance with GDPR and CCPA (standard DPA with SCCs available). For a copy of our SOC 2 report or additional compliance documentation, contact support@clearpointstrategy.com.

How is my data encrypted? ‍

All customer data is protected with AES-256 encryption at rest and TLS/HTTPS encryption in transit over public networks. This AES-256 encryption at rest and TLS 1.2+ in transit ensures your strategic information remains secure at all times.

What kind of backup and disaster recovery do you have? ‍

We store all client data in fully redundant databases with nightly full backups with frequent differential and transaction-log backups, encrypted with AES-256 and stored in geographically separated locations in the United States. Our architecture includes complete redundancy across load balancers, storage units, and processing engines, with data always written to two separate locations.

How do you handle security incidents? ‍

Our Incident Management Policy defines severity levels, investigation and escalation steps, and a post-incident review. An Incident Manager, with a designated deputy, coordinates the response, and Customer Success notifies affected customers. Report a suspected incident to security@clearpointstrategy.com.

Read our responsible disclosure policy in the Trust Center

What authentication options are available? ‍

ClearPoint supports Two-Factor Authentication (2FA), SAML-based Single Sign-On (SSO), and integration with SAML 2.0 identity providers such as Microsoft Entra ID (Azure AD) and Okta. Access to client data is restricted to legitimate business use only with role-based permissions.

How do you monitor and maintain security?‍

We monitor continuously with automated services (Amazon GuardDuty, Amazon CloudWatch and AWS Config); critical alerts go to engineering, and a weekly on-call rotation responds. Our systems track network resources, operating systems, and applications continuously, scaling automatically when capacity thresholds are reached.

How are your employees trained on security?‍

Employees are screened before they start, with background checks appropriate to the role and applicable law; contractors are screened commensurate with their access. Employees complete security and privacy training at onboarding and annually, and must acknowledge our Information Security Policy.

What is your change management process?‍

Our Change Management Policy governs changes to applications and infrastructure. Each change is tracked in the ticketing system, made through version control (GitHub) and a pull request, tested, and approved by someone other than its author before production. Infrastructure changes are made as code, and AWS CloudTrail and AWS Config log them and detect drift.

How do you ensure business continuity?‍

Our Business Continuity Planning (BCP) and Disaster Recovery (DR) processes prioritize critical functions. With our distributed cloud architecture, redundant infrastructure, and geographically separated data centers, we maintain high availability and can quickly recover from any disruption.

How often do you update your security practices?

‍We follow an agile development methodology with security testing throughout the entire lifecycle. Our Information Security Policy is reviewed and updated annually, and we conduct annual third-party penetration testing to identify and address potential vulnerabilities.

Can I restrict access to specific data within my organization?‍

Yes, ClearPoint offers element-level permissions that allow granular control over who can see and edit specific data. You can create custom roles, department hierarchies, and access policies that match your organizational structure.

How can I get more security information?‍

For detailed security documentation, SOC 2 reports, or specific compliance questions, please contact security@clearpointstrategy.com.

Want to learn more about security?

Book a Free Demo