Trust Center
Documents
Access Control
Access Control
Access is tightly monitored and controlled at our company. We are happy to provide more details about our access control practices upon request.
Endpoint Security
Endpoint Security
We follow industry best practices for endpoint security. We are happy to provide more details about our endpoint security practices upon request.
Network Security
Network Security
We protect our corporate network against external & internal threats.
Corporate Security
Corporate Security
We implement internal measures and practices to maintain a high standard of security.
Policies
Policies
We are currently working with experts to put together our company policies. Please contact us for more details.
Security Grades
Security Grades
We are constantly monitoring the security of our website. We will post our grades from public security rating agencies when they become available.
Incident Response
Incident Response
We have a dedicated team that responds to security incidents. We are happy to provide more details about our incident response practices upon request.
Risk Management
Risk Management
We have a dedicated team that manages security risks. We are happy to provide more details about our risk management practices upon request.
Asset Management
Asset Management
We have strict asset management policies in place to ensure that all assets are accounted for and secure.
BC/DR
BC/DR
We have a business continuity plan in place to ensure that we can continue to operate in the event of a disaster.
Change Management
Change Management
We have a change and configuration management process in place to ensure that changes are properly reviewed and approved.
Continuous Monitoring
Continuous Monitoring
We continuously monitor our systems for security threats and vulnerabilities. We are happy to provide more details about our continuous monitoring practices upon request.
Subprocessors
Subprocessors
- What data protection mechanisms does Directus provide?
- Can I choose which AWS region my data is stored in?
- What compliance certifications does Directus have?
- How does Directus handle data at rest and in transit?
- Does Directus transfer my data outside my selected region?
Cloud Subprocessor Updates
Addition of Northflank
We have updated our list of third-party subprocessors. Effective February 1, 2026, we have engaged Northflank to provide [e.g., cloud infrastructure, application hosting, and deployment services]. This addition supports our commitment to maintaining a scalable and secure infrastructure.
You can view our full list of subprocessors and their associated data processing locations here: Trust Center
- In the Legal Card-->Subprocessors
Rippling
A-LIGN