Your Security is Our Priority
Gclap is built with enterprise-grade security from the ground up. Learn about our security practices, compliance certifications, and data protection measures.
Data Encryption
TLS 1.3 in transit, AES-256 at rest
Data Residency
US and EU data center options
Access Control
RBAC, MFA, and SSO support
Compliance & Certifications
Industry standards and regulations we comply with
General Data Protection Regulation compliance for EU data subjects
Service Organization Control 2 certification for security, availability, and confidentiality
Information security management system certification
Health Insurance Portability and Accountability Act compliance with BAA available
California Consumer Privacy Act compliance
Compliance with anti-spam legislation requirements
Security Features
What's built into every Gclap account
Data Encryption
TLS 1.3 In Transit
All data in transit is encrypted using TLS 1.3, the latest transport layer security protocol.
AES-256 At Rest
All stored data is encrypted using AES-256 encryption, a military-grade standard.
End-to-End Email Encryption
Optional end-to-end encryption for sensitive email communications.
Authentication
Multi-Factor Authentication
Protect your account with TOTP-based two-factor authentication.
SSO Integration
Single Sign-On support for SAML 2.0 and OpenID Connect providers.
API Key Management
Secure API key generation with scoped permissions and rotation capabilities.
Session Management
Active session monitoring with ability to revoke sessions remotely.
Access Control
Role-Based Access Control
Granular permissions with Owner, Admin, Member, and Viewer roles.
IP Allowlisting
Restrict API access to specific IP addresses or ranges.
Audit Logging
Comprehensive audit trail of all account activities and changes.
Infrastructure
Cloud Security
Hosted on SOC 2 compliant cloud infrastructure with redundant systems.
DDoS Protection
Enterprise-grade DDoS mitigation to ensure service availability.
Regular Backups
Automated daily backups with 30-day retention and point-in-time recovery.
Disaster Recovery
Multi-region failover capability with 99.99% uptime SLA.
Email Security
SPF/DKIM/DMARC
Full email authentication protocol support for domain verification.
Bounce Handling
Automatic bounce processing and suppression list management.
Complaint Processing
FBL integration for automatic complaint handling and unsubscription.
Blocklist Monitoring
Continuous monitoring across 50+ email blocklists.
Security Practices
Our ongoing commitment to security excellence
Vulnerability Management
Regular security assessments, penetration testing, and vulnerability scanning to identify and remediate security issues.
Secure Development
Security-focused SDLC with code reviews, static analysis, and dependency scanning.
Employee Training
Mandatory security awareness training for all employees, including phishing simulations.
Incident Response
Documented incident response plan with 24/7 security monitoring and rapid response capabilities.
Third-Party Audits
Independent security audits and certifications from recognized auditors.
Business Continuity
Tested business continuity and disaster recovery plans to ensure service resilience.
Frequently Asked Questions
Common questions about our security practices
Have more questions?
Contact our security team for additional information, or check how your own domains are configured in the dashboard.