Overskill Overskill
Log in Sign up & build

Compliance & Certifications

Our infrastructure providers hold SOC 2 Type II certifications. Overskill itself does not hold its own SOC 2 certification at this time.

Current Certifications & Compliance

SOC 2 Type II

Inherited

Render (application), Amazon Web Services (platform database), Cloudflare (generated apps and edge), and Turso (legacy generated-app data) hold SOC 2 Type II infrastructure certifications. Overskill itself does not hold its own SOC 2 certification at this time.

Render, Amazon Web Services, Cloudflare and Turso (legacy) Provider trust pages below

ISO 27001:2022

Inherited

Render maintains ISO 27001 certification for its information security management system, providing international recognition of security practices.

Render, Inc. Certificate available via Render Trust Center

GDPR

Self-assessed

OverSkill processes personal data in line with the EU General Data Protection Regulation, and we offer a Data Processing Agreement (DPA) to all customers. This is our own assessment — it has not been reviewed by an external auditor or supervisory authority.

OverSkill (self-assessed) DPA available on request

CCPA

Self-assessed

We provide California residents with the privacy rights and disclosures the California Consumer Privacy Act requires. This is our own assessment — it has not been reviewed by an external auditor.

OverSkill (self-assessed) See Privacy Policy

Understanding Inherited Compliance

Overskill runs on SOC 2 Type II certified infrastructure — Render (application), Amazon Web Services (platform database), Cloudflare (generated apps and edge), and Turso (legacy generated-app data). Overskill itself does not hold its own SOC 2 certification at this time. A data-processing agreement (DPA) is available on request. AI-gateway logs for customer app traffic are metadata-only; no prompt or response content is retained.

What's Covered

  • Physical data center security
  • Network infrastructure security
  • Host operating system hardening
  • Backup and disaster recovery
  • Infrastructure monitoring
  • Access controls to infrastructure

Overskill's Additional Controls

  • Application-level encryption
  • User authentication (OAuth)
  • Role-based access control
  • Audit logging
  • AI security (prompt filtering)
  • Data processing agreements

Enterprise customers: For security questionnaires, refer to the public trust pages for Render, Amazon Web Services, Cloudflare, Turso. A data-processing agreement (DPA) is available on request. If your procurement process requires Overskill's own SOC 2 certification, contact us to discuss your requirements; we do not hold one at this time.

Compliance Roadmap

Direct SOC 2 Type II

Planned

Direct SOC 2 certification for OverSkill application-level controls

Timeline: Evaluating Q4 2025

HIPAA Compliance

Evaluating

Healthcare data compliance if customer base requires

Timeline: Based on customer demand

Need Compliance Documentation?

Enterprise customers can request a data-processing agreement (DPA) and help with security questionnaires. For provider audit documentation, follow each provider's public trust page above.

Request DPA Contact Security Team