Your data, looked after.
We're a young company, so we don't hold our own ISO 27001 or SOC 2 certificates yet. They're on the roadmap. What we've done instead is build Centaur on providers that do, and lock down everything that's ours to control.
Built on certified infrastructure
SOC 2 Type 2 and ISO 27001:2022. Encrypted at rest and in transit, with automatic DDoS protection.
SOC 2 Type II, ISO 27001 and ISO 27701. Encrypted at rest (AES-256), TLS 1.2+ on every connection, daily encrypted backups.
SOC 2 Type II, ISO 27001 and ISO 42001. You bring your own key, and your provider doesn't train its models on your data.
Centaur connects with permissions you grant, and you can revoke them at any time.
What we look after ourselves
- Every connection is encrypted, and browsers are told never to connect without it.
- Passwords are hashed (scrypt). We never see or store them.
- Your keys for AI, Microsoft 365 and your data provider are encrypted (AES-256-GCM) before they're stored.
- Each company's data lives in its own workspace, checked on the server on every request.
- Role-based access: you decide what each role can see and do.
- Sign-in attempts are rate limited to stop password guessing.
- We review our code for security regularly and fix what we find.
The certifications above belong to our providers. Centaur CRM itself is not yet certified. We're happy to share the full list of providers, with their certificates, with every company that joins the beta. Found a security issue? Email info@centaurcrm.com and we'll get straight on it.