# Security & Data Protection

{% hint style="info" %}
Need immediate access to the Dispel Security Team? Email us at [security@dispel.com](mailto:security@dispel.com).
{% endhint %}

## Our commitment

We build for critical infrastructure. That means your data security, privacy, and uptime are non-negotiable. Dispel’s Zero Trust Engine and operations program are independently audited, mapped to leading frameworks, and designed to help you meet your own compliance obligations.

## Certifications & attestations

* **SOC 2 Type 2** and **ISO 27001**: audited by accredited third parties, with controls spanning security, availability, confidentiality, and integrity.
* **FedRAMP High (pending)** and **export & sector standards** (e.g., EAR, ITAR, EN 301 549 accessibility, VPAT/Section 508) supported by internal controls and documentation.

> Need evidence? Request our latest reports under NDA.

## Built for compliance alignment

Many customers inherit Dispel’s controls to satisfy portions of their own frameworks. We provide alignment and shared-responsibility guidance for **NIST 800-53/82**, **IEC 62443**, **NERC CIP**, and **NIS2**.

## Privacy by design

We protect personal data and offer transparent controls over collection and processing. Our program supports **EU GDPR** and **U.S. CCPA** requirements, with clear policies and contact paths for questions or concerns.
