Collection
Security & Compliance
7 articles
01Security overview (SOC 2, ISO 27001)Attestations, how your data is protected, operational security, and how to get security documents.4 min→02Data encryptionAES-256 at rest, TLS 1.3 in transit, always on — plus Enterprise BYOK and optional end-to-end encryption.3 min→03GDPR complianceturgo as your processor — the DPA, honoring data-subject requests, lawful basis, and EU data residency.4 min→04Data residency optionsUS-East by default, with EU-Central and AP-Southeast residency on Enterprise — and what residency covers.3 min→05Audit logs for complianceA tamper-evident trail of user and system actions — what's logged, where to find it, retention, and export.3 min→06Data retention policiesHow long turgo keeps each class of data — records, logs, provenance — plus configurable purge and deletion.3 min→07DPA and BAA requestsSign the standard DPA, request a HIPAA BAA on Enterprise, track sub-processors, and how to request each.3 min→
