Encryption Everywhere
TLS for every connection and AES-256 for every database, file and backup, applied automatically.
SortBoxs Security
Enterprise-grade security, built in, not bolted on.
Encryption, access controls, audit trails and compliance practices protect your business data at every layer, from the browser to the backup.
- Encrypted in transit and at rest
- Single sign-on, MFA and role-based access
- A complete audit trail of every action
Security Center
Posture68of 100
Good
Security score
AI insight
Your security score is 68. Turning on “Bring your own keys” adds 12 points.
How it works
Defence in layers, from prevention to response
No single control is trusted to do everything. Each layer assumes the one before it might fail.
- 1
Protect
Data is encrypted in transit and at rest, and infrastructure is hardened and patched by default.
- 2
Control
Single sign-on, multi-factor authentication and role-based access decide who can see and do what.
- 3
Detect
Every action is logged, and unusual activity is flagged the moment it happens.
- 4
Respond
Alerts, session controls and tested recovery plans let you act quickly when something looks wrong.
Security controls
What protects your data
Pick an area to see the controls that sit behind it.
Data protection
Keeping information unreadable to anyone who shouldn't see it.
Coverage 3 layers
Encryption in transit
TLS 1.2+
Every connection
Browser, app and API traffic
Encryption at rest
AES-256
Databases, files and backups
Applied automatically
Key management
Your keys
Private deployments
Bring your own encryption keys
Security for the whole platform
The protections your security team asks about
Every item here applies to every module, so there's no weak corner of the product.
Single Sign-On & MFA
Connect your identity provider, require multi-factor authentication and set session timeouts.
Role-Based Access
Define who can view, edit, export and delete in each module, down to individual fields.
Audit Logs & Monitoring
A tamper-resistant record of every action, with alerts on unusual behaviour.
API Security
Scoped keys and OAuth, signed webhooks, rate limits and a log of every call.
Secure Infrastructure
Hardened, redundant infrastructure with regular backups and tested recovery plans.
Privacy and trust
Your data is yours, and we treat it that way
Security isn't only about keeping attackers out. It's also about being clear on who inside can see what, including us.
- Your data isn't used to train models for other customers
- Support staff access is limited, logged and time-bound
- Independent audits, with reports shared on request
- Export or delete your data whenever you need to
Least-privilege staff access
Support can view your workspace only after you approve it, for a limited time, and every view is logged.
Independently audited
Auditors test the controls, not just the paperwork, and the results are available to you.
Export and erasure
Download all your data in standard formats, or request deletion and receive confirmation.
Built for every industry
Trusted by businesses across all industries.
Part of one platform
One security model across every module
Roles, sign-in and audit logs are shared, so you configure them once and they apply everywhere.
Enterprise-Grade Security
Your data is protected with industry-leading security practices.
- SOC 2Certified
- ISO 27001Compliant
- DataEncryption
- Role-BasedAccess Control
- Audit Logs& Monitoring
- Regular Backups
- API Security
- SecureInfrastructure
