Your deals are safe with Arrows
Customer trust and security are critical to everything we do. Arrows is SOC 2 Type II and GDPR compliant, audited by a third party every year, with zero exceptions in our latest report.
AICPASOC 2
- 0Exceptions in our latest SOC 2 Type II report
- 100+Security controls monitored around the clock
- AES-256Encryption at rest, plus encryption in transit
- YearlyThird-party audits and penetration tests
Compliance and data privacy
Our SOC 2 Type II report is in the Trust Center. Here is what keeps it clean.
Infrastructure security
Arrows runs on Heroku, which uses Amazon Web Services (AWS) data centers. Customer data is stored in PlanetScale.
AWS provides an extensive list of compliance and regulatory assurances. See the AWS compliance documents for more detail.
Continuous monitoring
Over 100 security controls are continuously monitored across the organization.
Automated alerts and evidence collection mean Arrows can confidently demonstrate its security and compliance stance any day of the year.
Data encryption
Customer data is encrypted at rest with AES-256 block-level storage encryption, and in transit with SSL. Battle-tested infrastructure from Heroku, AWS and PlanetScale keeps your data secure.
Annual penetration testing
Arrows works with industry leading third-party security firms to perform annual network and application layer penetration tests.
WAF protection
A web application firewall screens traffic to Arrows and blocks common attacks before they reach the app.
Employee security training
All Arrows employees complete an annual security training program and employ best practices when handling customer data.
Still have questions?
Can’t find the answer you're looking for? Email us any time: help@arrows.to.
Is Arrows SOC 2 Type II compliant?
Yes, Arrows is SOC 2 Type II compliant. Our application and security practices undergo hundreds of daily automated tests to ensure consistent compliance and are regularly assessed by a third party auditor. A copy of our most recent SOC 2 Type II report is available in our trust center.
Where is data stored and processed?
Arrows data is stored in PlanetScale. You can view an updated list of our subprocessors here.
Can I control who has access to our Arrows plans and rooms?
Yes! You have full control over Arrows plan and room access. Depending on your security needs, you can choose between an open link available for anyone or restrict access permissions further.
Is Arrows GDPR compliant?
Yes, Arrows is GDPR compliant. We outline all our data processing measures in our Data Processing Addendum.
How is my HubSpot data protected?
Arrows follows all best practices for interacting with your HubSpot data, including only requesting permissions for data that we need. All data is accessed securely using HubSpot's API and we encrypt your access tokens. Additionally, Arrows is certified by HubSpot which requires an in-depth technical review by HubSpot's team of developers.