Security and your data

Where data is stored, how it is encrypted, what isolation between workspaces means, and how to export or delete.

4 min read

Where it lives

SignlOS runs on AWS. Data is stored in AWS US East (N. Virginia).

  • S3 + CloudFront for the web front end
  • ECS Fargate for the API
  • Aurora PostgreSQL for application data

Encryption

TLS 1.3 in transit, AES-256 at rest, including database backups.

Isolation

Every row of workspace data carries a tenant id, and every query is scoped by it — including the ones the API and MCP serve. An API key resolves to exactly one workspace and cannot address another, whatever it asks for.

Certification

Stated plainly

SignlOS is working toward SOC 2 Type II. It is not certified today.

Export and deletion

  • Export boards, posts, votes, roadmap, and changelog as JSON through the REST API at any time.
  • Deleting the workspace removes its data. Ask support if you need written confirmation for a compliance file.
  • A customer who posted on your public board can ask you to remove their post and email; deleting the post removes both.
NextTroubleshooting

Common questions

Where is SignlOS data stored?
On AWS. Data is stored in AWS US East (N. Virginia). Data is encrypted in transit with TLS 1.3 and at rest with AES-256.
Is SignlOS SOC 2 certified?
SignlOS is working toward SOC 2 Type II. It is not certified today.

Something unclear or wrong? Tell us — or post it on our board.