Security is a priority.

All data is encrypted in transit (SSL/TLS) and at rest using AWS-managed encryption. Access is governed by fine-grained, role-based permissions and least-privilege principles, with audit logging across key platform activity so only authorized users see what they should.

Yes. Eleven is SOC 2 Type II certified, with controls independently audited across security, availability, and confidentiality. SOC 2 reports are available to customers and prospects under NDA.

Yes. Eleven supports single sign-on (SSO) through your own identity provider, such as Google, Okta or Microsoft Entra ID, along with passkeys, multi-factor authentication (MFA), company sign-in policies, and secure session management.

Eleven is a cloud-hosted SaaS platform with customer data logically partitioned at the application layer. Role-based permissions, channels, and domain controls isolate data, users, and workflows across clients and accounts.

Eleven runs on Amazon Web Services (AWS) with redundancy across availability zones, continuous monitoring, and an architecture built for resilience and scale. We maintain backup and disaster recovery procedures that are tested periodically as part of our SOC 2 program.

Yes. Eleven maintains privacy and data handling practices aligned with GDPR and other applicable data protection requirements. Data Processing Agreements and subprocessor information are available on request.

Security at Eleven isn’t “set and forget.” We run continuous monitoring, vulnerability scanning, regular penetration testing, and proactive patching. Our team is trained in secure development practices, and we maintain an incident response plan to detect, investigate, and resolve issues quickly.