Trust

Built for ports. Audited like a bank.

Security, residency, and recovery are contractual, not aspirational. Every number on this page is one we are measured against.

Talk to SalesService status

At a glance

The commitments, in one table.

Certifications
ISO 27001, ISO 9001, SOC 2 Type II (annual, Type II report on request)
Data residency
eu-west-3 (Paris) primary, eu-north-1 (Stockholm) hot standby; UAE tenants pinned to me-central-1
Recovery objectives
RPO 60 seconds, RTO 15 minutes, tested quarterly with a documented failover drill
Availability
99.95% contractual, 99.98% trailing twelve months, published at status.anchora.io
Compliance
GDPR, NIS2-aligned, ISO 28000 supply-chain security, WCO SAFE Framework
Penetration testing
Annual third-party test; summary letter available under NDA

Full audit reports are available under NDA. If your compliance team wants to verify independently, we will send the auditor’s contact details.

In detail

Four areas, four pages.

Security

Dedicated database and encryption key per tenant, HSM-held keys, hardware-token production access.

Compliance & Certifications

ISO 27001, ISO 9001, SOC 2 Type II, ISO 28000, GDPR, NIS2-aligned — with the scope of each.

Reliability & SLA

99.95% contractual, 99.98% trailing twelve months, RPO 60 seconds, quarterly failover drill.

Data Residency

eu-west-3 primary, eu-north-1 standby, me-central-1 for UAE. No cross-region log shipping.

Next step

Send us your security questionnaire.

Most of it is already answered on these pages. We will do the rest in writing.

Talk to SalesRead the architecture overview