Certifications and compliance
SOC 2 type 2
Being a SOC 2 Type 2 audited company, Adverity ensures advanced data security by applying internal controls and demonstrating established security processes. Adverity is audited on a yearly basis.
ISO/IEC 27001
By adhering to the highest standards for Information Security Management Systems (ISMS), we guarantee that we are handling our customers’ data with the utmost care and attention, making sure our clients can focus on analyzing, rather than worrying about protecting their data. Adverity is audited by TÜV on a yearly basis.

GDPR and UK GDPR
Adverity collects and processes personal information from individuals both within and outside the European Union (EU) in full compliance with GDPR and UK GDPR requirements. We implement robust data protection measures to safeguard personal data and respect the privacy rights of all data subjects under these regulations.
California Consumer Privacy Act (CCPA)
Adverity honors the privacy rights of California residents as outlined in the CCPA. We maintain transparency about the personal information we collect, provide options to access or delete data, and ensure our business practices align with California's rigorous consumer privacy standards.
Digital Operational Resilience Act (DORA)
Adverity provides comprehensive support to our customers in achieving and maintaining their DORA compliance requirements. Our platform is designed with resilience principles that help financial services organizations meet their regulatory obligations while maintaining operational excellence and data security.
EU E-Privacy Directive
Our operations adhere to the EU E-Privacy Directive standards governing electronic communications and data protection. Adverity implements appropriate measures for cookie management, communication security, and data privacy that align with these important European privacy requirements.
HIPAA
Our platform is HIPAA compliant, providing a secure environment for processing protected health information (PHI) and helping covered entities and business associates meet their regulatory obligations. We implement robust safeguards to protect the confidentiality, integrity, and availability of electronic PHI (ePHI), ensuring that our customers can manage their data with confidence and security. To formalize this commitment, Adverity is prepared to enter into a Business Associate Agreement (BAA) with customers as required.
Data security
1.
Secure data integration
Your data is fetched through fully protected API connections using SSL/TLS protocols to guarantee integrity and security of the data imported into our platform. All processed data assets are encrypted at rest, so no unauthorized access is possible during the data transfers.
2.
Reliable and safe data storage
Adverity stores client data in secure facilities located in the European Union and United States, providing flexibility while maintaining compliance with regional data sovereignty requirements.
This flexible, reliable, and secure cloud infrastructure allows us to maintain service availability levels above 99.9% and ensures a high level of information security.
3.
Complete access control
Access to our platform and data is fully protected with user access control and well-defined access rights. Permissions are set on user group or individual level and always follow our least privilege principle. Additional techniques such as 2-factor authentication add an important layer of security, while SSO simplifies daily use of our customers.
4.
Full data privacy
The robust privacy protection requirements of the General Data Protection Regulation (GDPR) of the European Union (EU) and the European Economic Area (EEA) are in line with the values of Adverity.
Adverity is fully compliant with various data privacy legislation, such as the EU's GDPR. Our applications that handle data integration, processing, and storage are fully aligned with the best practices in protecting customer data privacy.
5.
Vetted partner network
Adverity's suborganizations meet stringent minimum security requirements for data protection and encryption. We carefully evaluate all partners to ensure they uphold the same rigorous standards we maintain, creating a secure ecosystem for all client data throughout our service network.
6.
Continuous security education
Our team undergoes comprehensive annual security training to stay current with the latest developments in the cybersecurity landscape. This ongoing education equips every Adverity employee with the knowledge and vigilance needed to safeguard your valuable data.
7.
Secure data lifecycle management
With controlled and secure processes in place, we ensure proper data deletion following the latest legal requirements for Deletion and Retention Periods. Adverity's comprehensive data lifecycle management guarantees that your information is handled appropriately from creation through disposal.
Looking to report a security concern?
Please fill out this form or send us an email via cybersecurity@adverity.com
Data security
1
Secure data integration
Your data is fetched through fully protected API connections using SSL/TLS protocols to guarantee integrity and security of the data imported into our platform. All processed data assets are encrypted at rest, so no unauthorized access is possible during the data transfers
2
Reliable and safe data storage
Adverity stores client data in secure facilities located in the European Union and United States, providing flexibility while maintaining compliance with regional data sovereignty requirements.
This flexible, reliable, and secure cloud infrastructure allows us to maintain service availability levels above 99.9% and ensures a high level of information security
3
Complete access control
Access to our platform and data is fully protected with user access control and well-defined access rights. Permissions are set on user group or individual level and always follow our least privilege principle. Additional techniques such as 2-factor authentication add an important layer of security, while SSO simplifies daily use of our customers.
4
Full data privacy
The robust privacy protection requirements of the General Data Protection Regulation (GDPR) of the European Union (EU) and the European Economic Area (EEA) are in line with the values of Adverity.
Adverity is fully compliant with various data privacy legislation, such as the EU's GDPR. Our applications that handle data integration, processing, and storage are fully aligned with the best practices in protecting customer data privacy.
5
Vetted partner network
Adverity's suborganizations meet stringent minimum security requirements for data protection and encryption. We carefully evaluate all partners to ensure they uphold the same rigorous standards we maintain, creating a secure ecosystem for all client data throughout our service network.
6
Continuous security education
Our team undergoes comprehensive annual security training to stay current with the latest developments in the cybersecurity landscape. This ongoing education equips every Adverity employee with the knowledge and vigilance needed to safeguard your valuable data.
7
Secure data lifecycle management
With controlled and secure processes in place, we ensure proper data deletion following the latest legal requirements for Deletion and Retention Periods. Adverity's comprehensive data lifecycle management guarantees that your information is handled appropriately from creation through disposal.
Looking to report a security concern?
Please fill out this form or send us an email via cybersecurity@adverity.com
Vulnerabilities detection
Strengthening security together: Our Bug Bounty Program
We are committed to maintaining the highest standards of security for our users and systems. As part of this commitment, we participate in HackerOne's Bug Bounty Program, collaborating with security researchers worldwide to identify and resolve potential vulnerabilities. Through this program, we invite qualified security researchers to responsibly disclose security issues and receive recognition and rewards for their contributions.
If you find a vulnerability in our services, please report it to us by clicking the button below. If the report is found to be valid and helps us improve our overall security, you will be eligible for a reward in accordance with our bounty structure.
Rigorous security validation
Adverity undergoes comprehensive annual penetration testing—authorized simulated attacks conducted by security experts to identify and address potential vulnerabilities. These intensive assessments ensure our systems maintain the highest level of protection against emerging threats, providing you with confidence in our security posture.
Proactive vulnerabilty detection
Our security infrastructure incorporates advanced vulnerability scanning tools that continuously monitor and identify potential weaknesses across our network-based assets. These specialized tools detect vulnerabilities stemming from misconfigurations or flawed programming in firewalls, routers, web servers, and application servers—allowing us to address potential security gaps before they can be exploited.
Master Subscription Agreement ("MSA") & Data Processing Agreement ("DPA")
Your data security: Protected at every level
Your data security is our highest priority at Adverity. Our comprehensive security framework ensures that your data remains protected while still allowing for the powerful analytics capabilities that drive your business forward.
For complete details on our security commitments and data handling practices, please review our Master Subscription Agreement (MSA) and Data Processing Agreement (DPA), which outline our legal obligations and safeguards for your peace of mind.
FAQs
Which security certifications does Adverity hold?
Adverity is ISO/IEC 27001 certified, which is the international standard for information security management systems (ISMS). We are also SOC 2 Type 2 audited, ensuring our internal controls for security, availability, and confidentiality meet rigorous industry benchmarks.
Is Adverity GDPR compliant?
Yes, Adverity is fully compliant with the EU General Data Protection Regulation (GDPR) and UK GDPR requirements. We prioritize data privacy and offer features like data masking and granular access controls to help our customers meet their own regional compliance requirements (including CCPA).
Can Adverity sign a Business Associate Agreement (BAA)?
For organizations that must comply with HIPAA, Adverity can enter into a BAA to ensure that all responsibilities regarding the protection of sensitive health data are clearly defined and met.
How is my data protected during transfer and at rest?
All data fetched through Adverity is transferred via fully protected API connections using SSL/TLS protocols to ensure integrity. Once inside our platform, all processed data assets are encrypted at rest using industry-standard encryption algorithms to prevent unauthorized access.
What is Adverity’s service availability (uptime)?
Our secure cloud infrastructure is designed for high reliability, maintaining service availability levels above 99.9%. We provide real-time monitoring and proactive status updates to ensure your data pipelines remain operational.
What hosting options are available? Do I need to store my data with Adverity?
The Adverity platform can be hosted on Amazon Web Services, Microsoft Azure, or Google Cloud, and is managed by Adverity. Additionally, you have the option to host your data within your own Snowflake or Google BigQuery warehouses. For any specific hosting requirements, please speak to your sales manager about alternative options.
Does Adverity support Single Sign-On (SSO) and Multi-Factor Authentication (MFA)?
Yes. To simplify user management and enhance security, we support Single Sign-On (SSO) integrations. We also provide 2-factor authentication (2FA) as an additional layer of protection for all user accounts.
Does Adverity offer data residency options?
To help customers meet data sovereignty requirements under UK and EU law, Adverity allows you to choose where your data is stored. We offer hosting in secure facilities in both the European Union and the United States, and we can support configurations that keep data within your own local infrastructure.
How do you manage user permissions?
Adverity follows the "principle of least privilege." Administrators can set granular permissions at the individual or user-group level, ensuring that team members only have access to the specific data streams, workspaces, and sub-accounts required for their roles.
How does Adverity test for security vulnerabilities?
We take a proactive approach to security through:
-
Annual Penetration Testing: Rigorous assessments conducted by independent security experts.
-
Continuous Scanning: Advanced tools that monitor our network for misconfigurations or programming flaws.
-
Bug Bounty Program: Collaboration with global security researchers via HackerOne to identify and resolve potential issues responsibly.











