Trust & Security

Synvara Technologies LLC is committed to maintaining a strong security, privacy, and compliance posture across all services, including the Synvara Training platform.

SOC 2 Type I Readiness

Synvara is actively aligned with the SOC 2 Trust Services Criteria for:

• Security
• Availability
• Confidentiality

Our controls are designed and implemented in accordance with SOC 2 Type I requirements and are undergoing internal validation in preparation for an independent audit.

Security Controls Overview

Organizational Controls

• Defined security ownership and access governance
• Least-privilege role enforcement
• Confidentiality agreements for personnel and contractors

Technical Controls

• Encryption in transit (TLS)
• Secure credential storage and hashing
• Environment isolation (prod / staging / dev)
• Centralized logging and monitoring
• Rate limiting and abuse prevention
• Secure CI/CD pipelines

Data Protection

• No storage of raw payment card data
• Stripe used as PCI-DSS compliant processor
• Data minimization and retention controls
• Controlled subprocessor access

Incident Response

• Documented incident response procedures
• Breach notification obligations aligned with GDPR and U.S. state laws
• Post-incident remediation and review processes

Privacy & Compliance Alignment

• GDPR / UK GDPR
• CCPA / CPRA
• CalOPPA
• Contractual DPA for enterprise customers
• Cookie consent enforcement where required

Subprocessors

Synvara uses a limited set of vetted subprocessors for:

• Cloud infrastructure
• Payments (Stripe)
• Monitoring and security tooling

Each subprocessor is contractually bound to confidentiality and security obligations.

Contact

For security, compliance, or enterprise inquiries: