Trust Center
Your data stays in your tenant. That's the whole design.
Nublou installs into your own Azure subscription from Azure Marketplace, so your data stays under your policies, inside your boundary. Here's our security at a glance. Everything else is available under NDA.
At a glance
SOC 2 Type II
Audit underway
Independent licensed US CPA firm. Report shared under NDA once issued.
Penetration testing
In progress
Independent test. Summary shared under NDA once complete.
Your data stays in your tenant
Your data never leaves your Azure subscription, and Nublou doesn't keep a copy.
Your identity, your control
Your people sign in with your own Microsoft Entra ID, and our access is visible in your own activity log.
AI that never trains on your data
AI features run inside your tenant and never use your data to train any model.
Secure development
Every change is reviewed and security-scanned before release.
Encrypted everywhere
Data is encrypted at rest and in transit, end to end.
Vetted, trained people
Everyone is background-checked and trained on security every year.
Built on Microsoft Azure
100% Azure, from the ground up.
Nublou runs entirely on Microsoft Azure, so the physical, hardware and platform layers are covered by Microsoft's own independent audits, including SOC 1, SOC 2, SOC 3 and ISO/IEC 27001. Those reports cover the Azure platform, not Nublou. Our own controls are being independently audited through our SOC 2 Type II engagement.
Microsoft's audit reports on the Service Trust PortalUnder NDA
Everything else, on request.
Our detailed security documentation is shared under NDA. Tell us what your review needs and we'll send what applies.
Found a security issue?
Send us the details. We'll acknowledge it, keep you updated, and ask that you give us a reasonable chance to fix it before disclosing it.
