How is my data stored and secured?

The policies and methods Aligned employs to keep your data safe.

We understand that your Aligned rooms can contain highly sensitive commercial and client data. Security is embedded into every layer of the Aligned platform — from infrastructure and encryption to access controls and compliance processes.

Legal Framework

Our Terms of Service and Privacy Policy outline how we collect, process, and protect your data, and your rights as a customer.

GDPR Compliance

Aligned is fully GDPR compliant and can be used in a GDPR compliant manner. We operate with defined data processing practices and documented security controls to ensure compliance with applicable data protection regulations.

SOC 2 Certification

Aligned's infrastructure providers are SOC 2 compliant, ensuring that the systems and controls that power our platform meet the Trust Services Criteria for security, availability, and confidentiality.

Encryption and Data Protection

All data is encrypted in transit using secure HTTPS and TLS protocols
Data is encrypted at rest within our infrastructure
Strict access controls, monitoring, and secure authentication mechanisms are in place to protect customer information at all times

Infrastructure and Shared Responsibility

Aligned is built on secure, industry-leading cloud infrastructure designed for resilience and high availability. Security follows a shared responsibility model:

Aligned protects your data through application-level controls, access management, monitoring, and secure development practices
Our infrastructure providers protect the underlying cloud infrastructure, including physical security of data centers, environmental safeguards, site monitoring, and infrastructure resilience

This layered approach ensures your data is protected both at the infrastructure level and within the application itself.

Access Controls

Access to your data in Aligned follows your permission level:

Sellers can only access rooms they own
Managers can access rooms belonging to their group
Admins can access any room in the account

Aligned never returns data you wouldn't already have access to within the platform.

Authentication

Aligned supports secure authentication methods including OAuth, which is used across our integrations — including the Claude and ChatGPT MCP connectors. OAuth tokens are automatically revoked when a user is removed or an account is downgraded, ensuring no unauthorized access persists.

❓ FAQ

Q: Where is my data hosted?

Aligned's infrastructure is built on industry-leading cloud providers designed for high availability, resilience, and compliance with data protection standards.

Q: Is my data shared with third parties?

Aligned does not sell your data. Data shared with third-party integrations (such as Claude or ChatGPT via MCP) is read-only and bounded by your own Aligned permissions.

Q: What happens to my data if I cancel my account?

Please refer to our Terms of Service for full details on data retention and deletion policies.

Q: Is Aligned GDPR compliant?

Yes. Aligned is fully GDPR compliant and can be used in a GDPR compliant manner.

💡 Need More Information?

If you require further technical documentation or compliance evidence, please visit our Security & Compliance Hub.

Or reach out to your account manager or our support team for assistance