Security at Redesign
At Redesign, security isn't an afterthought—it's foundational. We protect your data with enterprise-grade controls, transparent practices, and continuous improvement.
Security is a core part of our mission. Whether you’re using our managed services, engaging in a cybersecurity assessment, or leveraging our platform, we prioritize the confidentiality, integrity, and availability of your data. Our security approach is grounded in industry best practices and designed to scale with your business.
Platform & Data Protection
Our infrastructure and services are built with security in mind, incorporating multiple layers of protection to keep your data safe.
Encryption
All customer data is encrypted in transit using TLS 1.2+ and at rest using AES-256.
Engineering & delivery
We enforce role-based access controls (RBAC), least-privilege permissions, and multi-factor authentication (MFA) across our systems.
Network Security
Our environment is protected through firewalls, secure network segmentation, and intrusion detection systems (IDS).
Continuous Monitoring
We continuously monitor all systems to detect anomalies and quickly respond to suspicious activity.
Independent assurance you can trust
At Redesign, security and transparency are foundational to how we operate. We have successfully completed both our SOC 2 Type I and SOC 2 Type II audits, conducted by an independent third-party auditor.
Our SOC 2 reports evaluate Redesign's controls against the Trust Services Criteria for Security, Availability, and Confidentiality, as established by the American Institute of Certified Public Accountants (AICPA).
Our SOC 2 Type II report demonstrates that our systems are protected against unauthorized access, reliably available to meet our commitments, and that sensitive information is safeguarded throughout its lifecycle.
For a publicly shareable overview of our controls and audit results, find our SOC 3 report below.
.avif)
People, processes, and training
Security Awareness Training
All employees complete regular security training and phishing simulations.
Background Checks
All new hires undergo background verification prior to onboarding.
Internal Security Policies
We maintain internal policies covering acceptable use, data handling, device management, and incident reporting — with regular reviews and updates.
Monitoring, Detection, and Response
Our Security Operations team continuously monitors our environment to detect and respond to threats in real time. Our incident response playbooks are designed to ensure rapid containment, communication, and root cause analysis if an issue arises.
24x7x365 infrastructure monitoring
Centralized log collection and automated alerting
Threat detection and incident response procedures
Ongoing vulnerability management and remediation tracking
Have questions or need more Info?
Transparency is part of our promise. If you’d like to learn more about our security program, request our compliance documentation, or report a potential vulnerability, we’d love to hear from you.