# Airtime Trust Center

We’re mmhmm, the makers of Airtime, and we’re committed to the security and privacy of our customers’ data. It’s so important that it’s the first of the [Three Laws of mmhmm](https://youtu.be/U0ypi58-mdE). We apply these principles to everything we do, including Airtime.

### Certification and compliance

#### SOC 2 Type 2

Airtime is SOC 2, type 2 compliant. If you would like to request a copy of the latest report, please [contact our sales team](mailto:sales@airtimetools.com).

#### GDPR

We have implemented a GDPR compliance program. See our [Privacy Policy](https://www.airtime.com/legal/privacy-policy) for information about how we process your personal data.

#### CCPA

We have implemented a CCPA compliance program. See our [Privacy Policy](https://www.airtime.com/legal/privacy-policy) for information about how we process California residents’ personal information.

#### Governance

mmhmm maintains programs for incident response, business continuity, security awareness training, risk management and vendor management. We have a full-time information security and data privacy team.

#### Data Protection

Airtime encrypts data at rest and in transit using leading-practice protocols and algorithms. Customer data is logically segmented.

#### Access Controls

Airtime supports [single sign-on](https://help.airtimetools.com/hc/articles/5917767731991-Manage-single-sign-on-SSO-for-your-mmhmm-account) with several identity providers. All mmhmm employee system access is limited on a least-privilege basis. Access to the backend production environment requires multi-factor authentication.

#### Infrastructure Security

The Airtime infrastructure is hosted by an industry-leading cloud services provider. Cloud-native tools such as intrusion detection and prevention, web application firewalls, and denial of service protection are in place.

#### Vulnerability Management

mmhmm continuously monitors our environment for vulnerabilities and configuration risks. We conduct regular vulnerability scanning and penetration testing, and we maintain a [responsible disclosure program](https://www.airtime.com/en/legal/responsible-disclosure-and-bug-bounty-policy).

Have specific security questions? [Ask them here](https://help.airtimetools.com/hc/requests/new).