Docs › Reference › Security model

Security model

Understanding how Equate secures your out-of-band access.

Encryption

All OOB sessions use end-to-end encryption with TLS 1.3. Session keys are ephemeral and never stored.

Authentication

Multifactor authentication is required for all users. Agent authentication uses certificate-based mutual TLS.

Infrastructure security

Equate runs on AWS infrastructure with:

  • SOC 2 Type II certified operations
  • Encrypted at rest (AES-256)
  • Regular penetration testing
  • 24/7 security monitoring

Compliance

Equate is compliant with SOC 2, ISO 27001, and GDPR. Enterprise customers can request BAAs for HIPAA compliance.