Trust Center
Security, compliance and transparency at Maat Impact
Certifications and compliance
Maat Impact aligns its security program with recognized international frameworks.
Current status
- GDPR and LOPDGDD compliance (AES-256-GCM encryption, data subject rights, data retention)
- Alignment with OWASP Top 10 and OWASP ASVS
- Continuous auditing with 19 security quality gates in CI/CD
Roadmap
- ISO/IEC 27001 certification (in preparation)
- National Security Framework (ENS) and SOC 2 Type II (assessment)
Data Processing Agreement (DPA)
We provide our customers with a Data Processing Agreement (DPA) in accordance with Article 28 of the GDPR. The document is made available under a non-disclosure agreement (NDA).
Request DPASubprocessors
We maintain a public and up-to-date list of the subprocessors involved in delivering our services.
View subprocessors listSecurity policy
Information security is a fundamental pillar of the platform by design (security by design).
- Encryption in transit (TLS 1.2+) and at rest (AES-256-GCM)
- Multi-factor authentication (MFA) and role-based access control (RBAC)
- Real-time breach detection and audit trail with HMAC-SHA256 integrity
Security contact
To report a vulnerability or for security and privacy inquiries:
Security: security@maatimpact.com
Data Protection Officer (DPO): dpo@maatimpact.com