Security Portal

Stigg Security and Trust Portal — compliance reports, vulnerability disclosure, and security documentation

Stigg is designed with privacy and security at its core. We maintain SOC 1 Type II, SOC 2 Type II, and ISO 27001 certifications, reflecting our commitment to the highest standards of information security and data protection.

Stigg’s Security and Trust Portal provides access to compliance reports (SOC 1, SOC 2, GDPR), security documentation, and vulnerability disclosure information. The Security and Trust Portal is available at security.stigg.io.

GDPR compliance

While there is no formal EU certification process that allows a company to declare itself “GDPR certified,” Stigg provides functionality and safeguards that support GDPR compliance requirements:

• Customer data archiving: when a customer is archived in Stigg, all Personal Identifiable Information (PII) previously stored is automatically nullified.
• Flexible access: archiving can be done via the Stigg app UI or programmatically using the API and SDKs.
• Data Processing Agreements (DPAs): see below.
• Privacy by design: our platform provides the controls needed to respect data subject rights and ensure lawful processing.

GDPR compliance is a shared responsibility between Stigg and our customers. Stigg provides the certifications, security practices, and platform features necessary to enable GDPR-aligned usage, while our customers remain responsible for how data is ingested, managed, and retained within their applications.

Data Processing Agreement (DPA)

Customers of the Scale Plan that require a Data Processing Agreement (DPA) can request one to be signed as part of their contract with Stigg. More details can be found in our terms of use.

For where Stigg stores data, including PII, see Data residency and PII.