Trust

Security at Ellum.

How Ellum protects customer data: infrastructure, access control, monitoring, and how to report a vulnerability.

Status of this document

This page is a structural draft. Certifications, sub-processor list and detailed controls will be published after review.

Infrastructure

Hosted on managed cloud infrastructure with network isolation, encryption in transit (TLS 1.2+) and at rest, and automated backups.

Access control

Least-privilege access, single sign-on and multi-factor authentication for staff, and audit logging of administrative actions.

Monitoring and response

Continuous monitoring, dependency and supply-chain scanning, and a documented incident response process with customer notification.

Reporting a vulnerability

Found something? Contact us with the details and we will acknowledge within two business days. Please give us reasonable time to fix before disclosure.

We use cookies

We use strictly necessary cookies to run the site, and optional cookies to understand usage and measure marketing. You can change your choice at any time. Cookie policy