Security, privacy and trust at AhaSlides

Everything your security and procurement teams need in one place. How we protect your data, where it is hosted, the documents you can request, and the certifications we are working towards.

Talk to our team Security overview

Image guide: Get image from CMS set

How we protect your data

Image guide:
- Phosphor icon
- Color: Pink
- Type: Lined

Encryption and access control

Your data is encrypted in transit and at rest. Access is role based, protected with multi factor authentication, and reviewed regularly.

Hosting and data residency

Hosted on AWS with regions in the US and the EU, so your data stays in the region you expect. Daily backups and network protection are in place.

Independent testing

We run annual third party penetration tests and continuously monitor our security controls through Vanta.

Trust documents and resources

The documents your security and procurement teams ask for, ready to open or request. Each one opens in its own page.

Security overview

How we secure your data, our controls, and where to send questions.

Read overview

Privacy Policy (GDPR and PDPA)

How we collect, use and protect personal data under GDPR and Singapore PDPA.

Read policy

Sub-processors

Our maintained list of sub-processors, with a change log. More than 30 vendors.

View list

Accessibility and VPAT

Our accessibility commitments and the VPAT for the audience app.

View VPAT

AI use policy

How AhaSlides uses AI, and how we handle your data when you do.

Read policy

Terms of Service

The terms that govern your use of AhaSlides.

Read terms

System status

Live and historical uptime for AhaSlides services.

View status

Vulnerability disclosure

How to report a security issue, and our security.txt.

How to report

Compliance you can check, certifications on the way

We comply with GDPR and Singapore PDPA, publish our sub-processors, and provide a Data Processing Agreement on request. SOC 2 Type II and ISO 27001:2022 are both in progress, managed through Vanta. We will publish each report and certificate here as soon as it is awarded.

Read our security overview

Image guide: Get image from CMS set

"It was key that the tool was prepared for large crowds and allowed the simultaneous connection of a considerable number of people, something that AhaSlides offered us with total reliability."

Paula Angulo

Marketing Manager at Casademont Zaragoza

Security FAQ

Do you have SOC 2 or ISO 27001?

Both are in progress and managed through Vanta. We will publish each report and certificate here once awarded, and can share our current status on request.

Where is our data hosted?

On AWS, in the US and the EU. Talk to us if you need a specific region for your organisation.

Can we get a Data Processing Agreement?

Yes. A DPA is available on request. Contact our team and we will share it.

Do you keep a list of sub-processors?

Yes, a maintained public list with a change log. See our Sub-processors page.

Is AhaSlides accessible?

Our audience app meets WCAG 2.1 AA and we publish a VPAT. We are extending accessibility across the rest of the product. See our Accessibility page.

Running a security review? We are ready.

Talk to our team