ISO 27001
AlignedOur delivery process maps to ISO 27001 controls — asset management, access control, and change management are documented on every project.
Security & compliance
Built to pass review.
SSO/SAML, audit logs, role isolation, and SOC 2 alignment — set up so your security team isn't the bottleneck.
We build like your auditor is already in the room. The standards and controls below are the default on every engagement — not a paid add-on.
Standards we build against
SOC 2 Type II
AlignedSystems designed around the five trust principles — security, availability, integrity, confidentiality, privacy — evidence-ready from day one.
GDPR
ReadyData minimisation, right-to-erasure flows, and DPA-friendly processing built into anything that touches EU users.
HK PDPO
CompliantAs a Hong Kong studio we design to the Personal Data (Privacy) Ordinance by default — consent, retention, and cross-border transfer covered.
In every build
- AES-256 encryption at rest, TLS 1.3 in transit
- SSO / SAML with least-privilege role isolation
- Audit logs on every privileged action
- Deploys inside your VPC or on-prem when required
- Dependency scanning and signed releases
- Third-party pen test before every major launch