For related requests or inquires please contact: operations@chromatic.com
To report security issues, use: security@chromatic.com
Risk Profile
We have secure, reliable hosting customers can depend on. We’re happy to share details on our risk mitigation practices and recovery objectives on request.
Product Security
Customer data is encrypted in transit and at rest. We're happy to share more details about our product security upon request.
Reports
We may provide security-related reports upon request.
Data Security
We protect customer data with encryption, least-privilege access, and secure deletion practices. We are happy to provide more details about our data security practices upon request.
App Security
Security is built into our development process through secure coding standards, dependency scanning, and independent penetration testing.
ESG
Our Code of Conduct sets clear expectations for ethical business conduct.
Data Privacy
We’re committed to protecting the personal data entrusted to us and handle it in line with applicable privacy regulations. Please reach out with any questions about our privacy practices.
Access Control
Access to our systems and data is tightly controlled and limited to those who need it. Details on our access management practices are available on request.
Infrastructure
Chromatic runs on secure, reliable cloud infrastructure from industry-leading providers. We’re happy to share more about our hosting setup on request.
Endpoint Security
Company devices are centrally managed and secured to protect the data they access. More detail is available on request.
Network Security
We use industry-standard protections to keep our network and production environment secure. Please reach out with any questions.
Incident Response
We have a documented incident response process, details are available on request.
Risk Management
We assess and manage risk across our business and vendors. We’re happy to share more about our approach on request.
Asset Management
Company assets are tracked and managed throughout their lifecycle. More detail is available on request.
Training
All employees receive security and privacy training. Please reach out with any questions.
Change Management
Changes to our systems follow a structured review and approval process. Details are available on request.
Physical & Environment
We have physical and environmental controls in place to ensure that our data centers are secure and reliable.
Continuous Monitoring
We continuously monitor our systems for security threats and vulnerabilities. We are happy to provide more details about our continuous monitoring practices upon request.