Security

Your trust is at the heart of our platform

Ensuring your data’s confidentiality, integrity, and availability is at the core of our mission and our technology.

Built for security
Built for security

Front is built using industry-standard encryption, like encrypting data at rest using AES-256 bit encryption and data in transit using TLS encryption.

Privacy as a right
Privacy as a right

We’re ready to support the rights and obligations under the General Data Protection Regulation (GDPR). View our data processing addendum here.

Compliance ready
Compliance ready

We’re proud to be SOC 2 Type II and ISO 27001 certified, ensuring that client data is processed in a secure manner. You can request our latest SOC 2 report and ISO 27001 certificate here.

Enterprise features that meet the security needs of your organization

  1. Cloud Infrastructure

    Front is hosted on cloud infrastructure from Amazon Web Services. We perform daily backups and can rapidly scale to meet performance needs. Each customer is assigned a unique enterprise identifier for their own unique environment.

  2. Encryption

    We encrypt data at rest using AES-256 bit encryption and data in transit using TLS 1.2.

  3. Authentication

    We support 2FA and Single Sign-On (SSO) using any SAML-based Identity Provider (IDP) along with OAuth support for Office 365 and Gmail.

  4. Email Security

    We support SPF, DKIM, DMARC records.

  5. Regional Data Hosting

    We support data hosting options in the U.S. or the EU.

Get the white paper: Front’s Security and Compliance Practices

With a dedicated security organization, we’re always focused on following security best practices. Learn more about our security controls, data privacy, compliance, and governance.

Read white paper

Report a security concern

Front’s Bug Bounty program, powered by HackerOne, allows our community to collaborate on keeping Front safe and secure.