We build Automera to help you meet your regulatory obligations — not add to them. Here's where we stand today.
Our current certification status and roadmap across the frameworks our customers care about.
We comply with the EU General Data Protection Regulation for all personal data we process from EU residents.
CompliantPayments processed via PCI-DSS Level 1 service providers. We never store card numbers or CVVs.
CompliantOur controls are designed in line with SOC 2 Type II requirements. Audit scheduled for 2026.
Roadmap 2026Information Security Management System aligned to ISO 27001:2022. Certification in progress.
In ProgressCompliant with the Personal Data Protection Act No. 9 of 2022 for personal data of Sri Lankan residents.
CompliantHonoring California Consumer Privacy Act rights for California residents, including opt-out and deletion requests.
CompliantInformation security, data retention, incident response, and vendor management policies maintained and reviewed annually.
Every workflow action, approval, and configuration change is logged with actor, timestamp, and IP address.
Three-tier role system with least-privilege defaults. Every change requires authorization.
We sign DPAs with customers and vendors. Standard terms available on request.
All subprocessors reviewed for security posture before onboarding and re-assessed annually.
Customer notification within 72 hours of a confirmed data breach affecting their account.
Every feature we build passes a data protection review before release. We minimize collection, limit access, and encrypt everywhere by default.
Our privacy policy, terms, and security practices are public and written in plain language. If we change them, we give you at least 30 days' notice.
Enterprise customers can choose where their data is stored. We support EU, USA, and Sri Lanka regions.
Request account deletion at any time. We remove production data within 30 days, with backup copies purged on our rolling 90-day schedule.
We support customer compliance audits by providing security documentation, penetration test summaries, and control evidence on request.
We provide DPAs, security questionnaires, penetration test summaries, and control matrices to qualifying customers.
We use cookies to run the site, understand how it's used, and improve your experience. Read our Privacy Policy.