Enterprise-grade security, from the first message you scan.
Persado runs on AWS across US and EU regions, with encryption, least-privilege access and round-the-clock monitoring built in.
- Hosted on AWS
- ISO 27001 aligned
- US and EU regions
every message, every layer
Illustration
If one region goes down, the other keeps scoring.
- AWS multi-regionHosted on Amazon Web Services. APIs deployed across US and EU regions. Latency-based routing serves requests from the nearest region.
- High availabilityMulti-AZ deployments within each region. Fault-tolerant components. Horizontal auto-scaling for traffic spikes.
- Disaster recoveryCross-region data replication. Regional failover capabilities. Encrypted backups.
fails over on its own
Illustration
Three layers between your data and everyone else.
Access is limited to what each job needs. Everything is encrypted.
Layer 1: Encrypted in transit
TLS for all data in transit.
Layer 2: Access control
Documented provisioning and approval processes. Least-privilege access. MFA on critical systems. Prompt revocation on role change.
least privilege, by default
Layer 3: Encrypted at rest
Encryption at rest within AWS using technical and organizational controls.
- ISO 27001 aligned
- Information security management system aligned to ISO 27001:2013
- Hosting
- Production hosted on AWS, with ISO 27001, PCI DSS Level 1 and SOC 1 coverage
- Encrypted backups
- Replicated across regions
Watched around the clock. Tested every year.
24/7 monitoring
Centralized logging. Third-party SOC monitoring around the clock. Layered network defenses (firewalls, IDS, WAF).
Patching & testing
Critical patches within 48 hours. All patches within 30 days. Annual third-party penetration testing. Recurring vulnerability assessments.
Audit & observability
Full analytics and reporting on served variants. Variant IDs and events can be pushed into your analytics stack for auditing and compliance dashboards.
Standards and data protection.
Persado’s own program is ISO 27001 aligned. The AWS infrastructure it runs on holds the attestations below.
- PersadoISO 27001
Aligned
- AWSISO 27001
Infrastructure coverage
- AWSPCI DSS Level 1
Infrastructure coverage
- AWSSOC 1
Infrastructure coverage
GDPR
APIs run in an EU AWS region, and Persado publishes its GDPR sub-processors.
Security questions, answered.
Your security team has more? We’ll connect them with ours.
Persado is hosted on Amazon Web Services. APIs are deployed across US and EU regions, and latency-based routing serves each request from the nearest region.
TLS protects all data in transit, and data is encrypted at rest within AWS using technical and organizational controls. Backups are encrypted and replicated across regions.
Persado's information security management system is aligned to ISO 27001:2013. Production is hosted on AWS, which holds ISO 27001, PCI DSS Level 1 and SOC 1 coverage for the infrastructure layer.
Access follows documented provisioning and approval processes and the principle of least privilege. Critical systems require MFA, and access is revoked promptly when a role changes.
Critical patches are applied within 48 hours and all patches within 30 days. Third-party penetration testing runs every year, with recurring vulnerability assessments in between.
Yes. Persado provides full analytics and reporting on served variants. Variant IDs and events can be pushed into your analytics stack for auditing and compliance dashboards.
APIs run in an EU AWS region, and Persado publishes its GDPR sub-processors on persado.com/legal/gdpr-sub-processors. Talk to us about data processing terms for your team.
Yes. Talk to us and we will connect your security team with ours.
Bring your security team along.
We’ll walk them through how Persado is protected.
- Hosted on AWS
- ISO 27001 aligned
- US and EU regions
Thank you. We'll be in touch shortly.