Security
Security & compliance at Mido.
Mido is SOC 2 compliant, encrypts all data in transit and at rest, and limits production access by role.
Visit our Trust CenterDefense in depth
How Mido protects your data.
Mido applies layered security controls across its infrastructure, applications, and data.
Encryption
Data in transit
All data in transit is encrypted with TLS 1.2+ across public and private networks.
Data at rest
All data at rest is encrypted with AES-256.
Key management
Encryption keys are managed by the cloud providers’ key-management services, with rotation and access controls.
Access control
Least-privilege access
Production access is restricted by default and granted on a least-privilege, role-based basis.
Single sign-on & MFA
Every internal system requires single sign-on and enforced multi-factor authentication.
Application & platform security
Vulnerability scanning
Mido runs continuous dependency and vulnerability scanning.
Data isolation
Customer data and environments are isolated from one another.
Data segregation
All customer data is segregated by unique cryptographic IDs.
Availability & recovery
Automated backups
Customer data is backed up automatically and encrypted at rest.
Disaster recovery
Recovery procedures are tested regularly.
Privacy
No training on your data
Mido does not train AI models on any raw data you enter into the platform.
Ownership & deletion
You retain ownership of the data you submit and can delete it at any time. Mido does not sell your data.
Monitoring & response
Threat monitoring
Mido continuously monitors for abuse, fraud, and unauthorized access.
Incident response
Security events trigger alerts and a defined response process.
Infrastructure
Infrastructure and data residency.
Mido runs on Amazon Web Services, Google Cloud, and Microsoft Azure. On request, Mido configures the provider and region to meet data-residency and latency requirements.
Amazon Web Services
SOC 2 Type II · ISO 27001
Google Cloud
SOC 2 Type II · ISO 27001
Microsoft Azure
SOC 2 Type II · ISO 27001
Compliance & privacy
Compliance and privacy.
Mido is SOC 2 compliant and aligns its data practices with GDPR, CCPA, and CPRA. See our current security posture in the Trust Center.
SOC 2
Mido is SOC 2 compliant, and our SOC 2 Type II audit is in its observation period.
GDPR
Mido aligns with GDPR, including data-subject rights, data minimization, lawful processing, and Standard Contractual Clauses for international transfers.
CCPA & CPRA
Mido aligns with CCPA and CPRA, does not sell personal data, and supports access, correction, and deletion requests.