Security at Pagora

Your security.
Our highest priority.

Every website you build on Pagora is protected by enterprise-grade security, privacy-first practices, and infrastructure designed for reliability. We continuously invest in people, processes, and technology to keep your data and your customers safe.

Secure by DesignPrivacy FirstAlways Improving
Security illustration

Built with security at every layer

Security isn't an afterthought—it's built into every part of the Pagora platform. From infrastructure to application security, we follow industry best practices to protect your business.

Data Encryption
Your data is encrypted both in transit using TLS and at rest using modern encryption standards to help prevent unauthorized access.
Secure Infrastructure
Pagora runs on reliable cloud infrastructure with network protection, redundancy, and continuous monitoring to ensure dependable performance.
Automatic Backups
Regular backups help safeguard your website and data, allowing recovery in the event of unexpected issues.
Access Control
Role-based permissions and secure authentication help ensure only authorized users can access your account and workspace.
Continuous Monitoring
We continuously monitor our infrastructure and services to identify unusual activity, respond quickly to incidents, and maintain platform reliability.
Secure Development
Security is integrated into our development process through code reviews, testing, dependency management, and regular updates.
Privacy First
Your data belongs to you. We never sell customer data and are committed to protecting your privacy.
High Availability
Our infrastructure is designed for reliability, helping keep your websites online with minimal downtime.
Compliance & Certifications
We align with global standards to keep your data protected.
ISO 27001
Information Security
GDPR
Data Protection
CCPA
Consumer Privacy
SOC 2 Type II
Availability & Security

Last updated: June 30, 2026. Security is an ongoing process, we regularly review and update our practices.

Our Commitment
Security is not a feature, it's our foundation.
We continuously invest in people, processes, and technology to protect what matters most to you. Our staff undergo monthly training, and core cloud operations are protected by multi-signature validation channels.
Have questions about security?
We're here to help.
Contact us
Operational Integrity

Security Principles

Security by Design

Every new feature is developed with security considered from the very beginning—not added later.

Least Privilege Access

Internal systems and team members receive only the access necessary to perform their responsibilities.

Continuous Improvement

Security evolves every day. We regularly review our infrastructure, update our systems, and improve our practices.

Our System Schemas

How we protect your data

Infrastructure Security
Reliable cloud infrastructure, firewalls, secure networking, and continuous monitoring protect the platform from common threats.
  • SOC 1/2/3 physical data centers
  • DDOS mitigations
  • WAF policies
Application Security
Secure coding practices, vulnerability testing, dependency updates, and regular security reviews strengthen every release.
  • Automated package scanning
  • Peer code reviews
  • Isolated sandboxes
Data Protection
Encryption, secure storage, controlled access, and backup strategies help keep customer information protected.
  • TLS 1.3 encryption
  • Encrypted local state keys
  • Daily backup snapshots
Vulnerability Reporting
Responsible Disclosure
We appreciate responsible security research. If you discover a potential vulnerability in Pagora, please report it responsibly. Our team investigates every valid report and works quickly to resolve confirmed issues.
Report a Security Issue
security@usepagora.com