> ## Documentation Index
> Fetch the complete documentation index at: https://docs.usetool.bar/llms.txt
> Use this file to discover all available pages before exploring further.

# Security

> We built Toolbar with security at the core. Our platform follows industry-standard practices for encryption, access control, and secure operations - so your team can stay productive while your data stays protected.

### Compliance and Commitments

<Card title="GDPR: Compliant." icon="check" iconType="solid">
  We align our data handling, user rights, and vendor management with the GDPR framework, including data subject rights, lawful bases, and records of processing activities.
</Card>

<Card title="SOC 2 Type II: On our roadmap." icon="check" iconType="solid">
  We are formalizing controls and evidence collection toward SOC 2 Type II and will share progress updates as milestones are reached.
</Card>

<Card title="Data Processing Agreement (DPA):" icon="check" iconType="solid">
  Available upon request for customers who need contractual assurances aligned to GDPR.
</Card>

### Data Protection

* **Encryption in transit:** All data transmitted between clients and our services is protected by TLS (HTTPS).
* **Encryption at rest:** Customer data stored by Toolbar is encrypted using strong, modern ciphers.
* **Secrets management:** Application and infrastructure secrets are stored securely and rotated on a defined schedule.
* **Backups and resilience:** Regular backups and recovery testing ensure continuity and help minimize downtime and data loss.

### Secure Development

* **SDLC:** Security requirements are integrated into design, development, code review, and release processes.
* **Dependency hygiene:** We scan third-party libraries for known vulnerabilities and update proactively.
* **Testing:** Automated tests and security checks run in CI to catch regressions early.
* **Change management:** All production changes are tracked and reviewed before deployment.

### FAQs

<Accordion title="Where is my data stored? ">
  Your data is hosted in reputable, tier‑1 cloud regions with strong physical, network, and operational controls. Specific regions and residency options are available upon request.
</Accordion>

<Accordion title="Do you have intrusion detection?">
  We apply network-level protections, behavioral monitoring, and log analysis to detect anomalies and potential threats.
</Accordion>

<Accordion title="How often do you perform security testing?">
  We conduct ongoing vulnerability scanning and schedule independent assessments at key release and compliance milestones.
</Accordion>

<AccordionGroup>
  <Accordion title="Do you offer a bug bounty?">
    Not currently. We welcome responsible disclosure reports and respond promptly to all submissions.
  </Accordion>
</AccordionGroup>

<Accordion title="Contact security">
  Reach our security team at your designated support channel or your account representative.

  [contact@usetool.bar](mailto:contact@usetool.bar)
</Accordion>