Independent assurance
SOC 2 Type II compliance and third-party security testing provide external validation of Prokurio’s controls.
Protecting the intelligence behind every IP decision.
Prokurio protects sensitive IP and financial data with independently reviewed controls, documented operating practices, and transparent access to our security materials.
View Trust CenterSecurity you can verify.
Privacy commitments
Documented practices support GDPR and CCPA-aligned handling of personal and customer information.
Transparent documentation
Review controls, policies, subprocessors, and supporting materials through the Prokurio Trust Center.
How Prokurio protects your data.
Technical controls are supported by documented processes, independent testing, and ongoing operational discipline.
Encryption
Data is encrypted in transit using TLS 1.2+ and protected at rest.
Access control
Access to systems and customer information is governed through documented controls and authorized responsibilities.
Infrastructure resilience
Backup, continuity, and disaster-recovery procedures support availability and data protection.
Product security
Security practices are incorporated into development, testing, deployment, and change management.
Independent testing
Regular third-party penetration testing helps identify and address potential vulnerabilities.
Vendor governance
Subprocessors and service providers are reviewed as part of Prokurio’s data-protection responsibilities.
One program. Several layers of protection.
Built to remain available and recoverable.
Operational safeguards support the systems that store and process customer information.
- Production backups
- Database resilience
- Business continuity
- Disaster recovery
- Infrastructure monitoring
Security is part of how the platform is built.
Controls extend through development, testing, release, and ongoing product operation.
- Encryption in transit and at rest
- Security testing
- Controlled production changes
- Code review
- Vulnerability management
Technology controls are supported by operating discipline.
Documented internal practices help turn security requirements into repeatable responsibilities.
- Asset management
- Employee security practices
- Access governance
- Incident-response procedures
- Cybersecurity insurance
Customer information is handled through documented policies.
Privacy processes govern how information is classified, retained, shared, and deleted.
- Data classification
- Retention procedures
- Customer-data deletion
- Subprocessor governance
- Privacy-request procedures
Transparency
The documents your review requires. All in one place.
Prokurio’s Trust Center gives security, legal, privacy, and procurement teams a direct path to current information about controls, policies, testing, and subprocessors.
Open Trust Center ›- Security and privacy policies
- Penetration-test information
- Business continuity and disaster recovery
- Architecture and data-flow materials
- Subprocessor information
- Privacy and compliance documentation
Protected throughout the data lifecycle.
- 01
Receive
Data enters through protected connections and authorized workflows.
- 02
Use
Access is limited to the systems and people required to deliver the service.
- 03
Maintain
Controls support monitoring, backup, continuity, and appropriate retention.
- 04
Delete
Documented processes govern customer-data deletion and account closure.
Ready for review
Need documentation for your security review?
Access current security materials or contact the Prokurio team with a specific question.
Security and privacy questions.
Where can our team review Prokurio’s security documentation?
Public information and access-controlled materials are available through the Prokurio Trust Center. Your security, legal, or procurement team can request access when additional evidence is required.
How is customer data encrypted?
Prokurio protects data in transit using TLS 1.2+ and applies encryption to data at rest.
Does Prokurio conduct penetration testing?
Yes. Prokurio performs regular third-party penetration testing as part of its security assurance program.
Where can we review Prokurio’s subprocessors?
Current subprocessor information is maintained in the Trust Center so reviewers can understand which providers support delivery of the platform.
Review subprocessors in the Trust Center ›How does Prokurio handle retention and deletion?
Documented retention and deletion procedures govern the customer-data lifecycle. Specific requirements and supporting documentation can be reviewed through the Trust Center.
How do I report a potential vulnerability?
Email security@prokurio.com with details of the issue so the security team can review and respond.
Email security@prokurio.com ›How can someone submit a privacy request?
Email privacy@prokurio.com to submit a privacy request. Prokurio’s Privacy Policy provides additional information about applicable rights and processes.
Email privacy@prokurio.com ›Can our team request audit and policy materials?
Yes. Authorized customers and prospects can request access to applicable audit, policy, architecture, and testing materials through the Trust Center.