Security & Compliance

Release maintains SOC 2 Type 2 certification, independently audited annually by a qualified third-party firm. This certification validates our security controls across the Trust Service Criteria:

• Security — Protection against unauthorized access
• Availability — System accessibility as agreed upon
• Processing Integrity — System processing is complete and accurate
• Confidentiality — Information designated as confidential is protected
• Privacy — Personal information is collected and used appropriately

Request our SOC 2 Report: Contact security@release.com to request a copy (NDA required).

Release is committed to GDPR compliance for customers processing data of EU residents:

• Data Processing Agreement — Standard DPA available for all customers (view DPA)
• Standard Contractual Clauses — SCCs for international data transfers
• Data Subject Rights — Full support for access, rectification, erasure, and portability requests
• Subprocessor Transparency — Complete list of subprocessors with 30-day change notification (view list)

For California residents, Release supports CCPA requirements:

• Right to Know — Request information about data collected about you
• Right to Delete — Request deletion of your personal information
• Right to Opt-Out — We do not sell personal information to third parties
• Non-Discrimination — Equal service regardless of privacy choices

To exercise your rights, contact support@release.com.

Release implements comprehensive security controls to protect your data:

Release maintains strict security requirements for all vendors and subprocessors:

• Security Assessment — All vendors undergo security review before engagement
• SOC 2 Requirement — Critical vendors must maintain SOC 2 or equivalent certification
• Contractual Protections — Data processing agreements with all vendors handling customer data
• Ongoing Monitoring — Regular review of vendor security posture and compliance

The following security and compliance documentation is available upon request: