SECURITY & COMPLIANCE
The safety of your data is our first priority
![Image of security lock logo that says Privacy, Security, Safety, Trust, PSST & Amperity.](https://amperity.imgix.net/5vqt5w81x2im/3rF08iL72jNud7a6KLHDnZ/8909fd0400122857b5e8c4de80f1a73b/SecurityPage_PingPong_Hero.jpg?auto=format%2Ccompress&fit=max&w=2560)
Enterprise-grade security, governance and compliance
Our customers depend on Amperity to unify customer data and make it usable. We recognize the extraordinary importance of this data and our critical role in protecting it. The security, integrity, and accessibility of your data is essential.
![Image of 5 badges for various certificates and security features including AICPA SOC2, HIPAA, GDPR, CCPA, SSO Integrated, and Full Audit Transparency.](https://amperity.imgix.net/5vqt5w81x2im/2CeRXifFIXuKqudxfKBdL1/e097e6299ed53ca875adacdb67801270/SecurityPage_PingPong_CertificatesBadges.jpg?auto=format%2Ccompress&fit=max&w=2560)
Amperity Risk Management Framework
Legal, regulatory, and audit compliance
Leadership, governance, and culture
Organizational informational risk management
Business continuity, disaster recovery, and incident management
Application, infrastructure, and operational security
![Image of concentric circles around an illustration of a person with text going around each circle.](https://amperity.imgix.net/5vqt5w81x2im/60M4mMyHqm0cjUyJrBUT9Y/31b71a4b8e9c8a7352e010a3c9eda693/SecurityPage_PingPong_RiskManagement.jpg?auto=format%2Ccompress&fit=max&w=2560)
Amperity Security Principles
Start from the Ground Up
The architecture of a system and its security properties are intertwined. Security cannot be "bolted on" to a system that has already been constructed. Amperity has been designed with security as its primary concern from the very beginning. Security is a core part of Amperity’s development process, from initial architecture through deployment and operations.
Integrate Automation
Modern systems designed for large scale data processing are extraordinarily complex, requiring coordination of hundreds of machines. Effective security practice in a system of this complexity requires a mastery of change management and the ability to respond quickly. Amperity completely automates its systems, from infrastructure provisioning through code deployment. Incident response time is nearly instantaneous regardless of the nature of the issue.
Measure Everything
It is impossible to quantitatively improve something that is not measured or observed. This is particularly true in the domain of security. Attackers work hard to compromise systems and to avoid detection. A breach of an unmonitored system may go unnoticed until it’s too late. Amperity applies comprehensive measures at every layer of the stack to proactively observe anomalies and maintain security visibility across all systems, services, and resources.
Balance People, Process, and Technology
A system’s security is only as strong as its weakest link. Thus, imbalance in focus across the spectrum of security concerns leads to failure. Each concern is necessary, but individually not sufficient. Amperity deeply respects the importance of each area of concern, and constantly works to keep them in ideal balance, ensuring that no single failure puts the security of the system in jeopardy.