Trust at Prova

Security at Prova

We build the platform that helps customers run modern GRC programmes — and we operate our own to the same standard. This page summarises how we secure your data today and where we are heading next.

lock

Encryption everywhere

All customer data is encrypted in transit (TLS 1.2+) and at rest (AES-256).

shield_person

Least-privilege access

Production access is role-based, time-bound, and fully audited.

verified_user

SOC 2 & ISO 27001

We are aligned with SOC 2 Type II and ISO 27001. Reports available on request under NDA.

bug_report

Responsible disclosure

Found a vulnerability? Email security@provahq.io — we acknowledge within one business day.

Trust centre coming soon

Need our SOC 2 report or security questionnaire?

Reach out and we will share the latest documentation under NDA.

Contact security arrow_forward