Trust & Security
Safeguarding your trade compliance data is our highest priority. From HTS classifications to sourcing matrices to policy alerts, we protect your portfolio with enterprise-grade security controls, an ISO 27001 aligned program, and a SOC 2 ready operating model.
How your data stays protected, end to end
AES-256 at rest and TLS 1.3 in transit, by default on every record.
Zero Trust on every request. MFA, role-based access, and IP allowlisting.
Cloud-native event streams watched 24/7, alerts routed in minutes.
Continuous penetration tests, change logs preserved for evidence.
01 / Data Protection
Every piece of customer data we hold, your product master, your tariff calculations, your policy alerts, is encrypted by default and shielded behind a Zero Trust perimeter.
We encrypt your data both at rest and in transit by default. Product descriptions, HTS classifications, and tariff scenarios are protected with AES-256 storage encryption and TLS 1.3 in transit, ensuring your information stays secure across its entire lifecycle.
We adopt a strict Zero Trust posture. Every API call, dashboard request, and internal access is verified, authorized, and logged as though it originates from an untrusted network. No implicit access, no shared service accounts.
02 / Security Measures
Security is a continuous practice, not a quarterly checkbox. We pair proactive testing with strict access controls to close gaps before they reach customer data.
GingerControl runs annual third-party penetration tests and bi-weekly vulnerability scans across the full stack, proactively identifying and remediating risks before they reach production.
We enforce granular role-based access controls, hierarchical permissions, mandatory MFA, and IP allowlisting on production systems, so only authorized personnel can reach sensitive trade data.
03 / Standards
Our information security program is built against the controls auditors actually look for: ISO/IEC 27001 for the management system, SOC 2 Trust Services Criteria for ongoing operational evidence.
GingerControl's Information Security Management System is built against the ISO/IEC 27001 framework. We implement the full set of organizational, technical, and physical controls to protect customer data confidentiality, integrity, and availability, with documented policies, risk assessments, and continuous improvement cycles.
Our systems operate against the SOC 2 Trust Services Criteria covering Security, Availability, Confidentiality, and Privacy. We maintain auditable evidence of these controls in production at all times and can share our latest report under NDA with enterprise customers.
04 / Trusted AI
AI in compliance is only useful if you trust how it handles your data. We are explicit about what our models do, what they do not do, and what you control.
A dedicated team oversees model behavior, output quality, and ethical boundaries. Our AI systems operate within documented guidelines, with human-in-the-loop checkpoints on every high-stakes classification or audit response.
You retain full control over which AI features your team uses, what data is shared, and at what scope. We never train shared production models on your data, and per-organization retention and opt-out policies are configurable.
05 / Infrastructure
Underneath the product, we run on managed cloud infrastructure with strict network isolation and round-the-clock event monitoring.
GingerControl runs on managed cloud infrastructure inside private VPCs, with strict network segmentation and least-privilege IAM. Production workloads can be pinned to regions matching your data residency requirements.
We monitor security event streams 24/7 via cloud-native tooling such as CloudTrail and GuardDuty equivalents. Alerts are routed to our on-call security responders within minutes of detection, with documented playbooks for triage and containment.
We use cookies to understand how visitors interact with our site. No personal data is shared with advertisers.