> ## Documentation Index
> Fetch the complete documentation index at: https://site.aspect.build/llms.txt
> Use this file to discover all available pages before exploring further.

# Security Overview

> Security and data privacy are top priorities of ours. Aspect Workflows is self-hosted and deployed to customer AWS or GCP cloud accounts where customers have full control over their data.

export const MarketingPage = () => <div className="marketing-page-marker" style={{
  display: "none"
}} />;

export const CopyEmail = ({email = "hello@aspect.build"}) => <span className="inline-flex items-center gap-2">
    <a href={`mailto:${email}`} className="text-blue-600 dark:text-blue-400 font-semibold hover:underline">{email}</a>
    <button type="button" onClick={e => {
  navigator.clipboard.writeText(email);
  const b = e.currentTarget;
  b.textContent = "Copied!";
  setTimeout(() => {
    b.textContent = "Copy";
  }, 1500);
}} className="text-xs px-2 py-0.5 rounded-md border border-zinc-300 dark:border-zinc-600 text-zinc-500 dark:text-zinc-400 hover:bg-zinc-100 dark:hover:bg-zinc-700 transition cursor-pointer">
      Copy
    </button>
  </span>;

export const Section = ({children, className = "", gray = false, dark = false, id}) => <section id={id} className={`w-full flex justify-center px-4 py-16 md:py-24 ${gray ? "bg-gray-50 dark:bg-zinc-900" : dark ? "bg-zinc-900 dark:bg-zinc-950" : ""} ${className}`}>
    <div className="w-full" style={{
  maxWidth: "1140px"
}}>
      {children}
    </div>
  </section>;

<MarketingPage />

<Section>
  <div className="mx-auto prose dark:prose-invert prose-zinc" style={{ maxWidth: "800px" }}>
    <h1>Security Overview</h1>

    <p>Security and data privacy are top priorities of ours. Aspect Workflows is self-hosted and deployed to customer AWS or GCP cloud accounts where customers have full control over their data.</p>

    <h2>Compliance</h2>

    <p>Aspect continues to invest in security best practices and pursue security certifications that matter to our customers. Our product platform is SOC 2 Type 2 and SOC 3 certified.</p>

    <h2>Access Control</h2>

    <p>All Aspect Workflows web surfaces, including the Build & Test UI, sit behind your identity provider with single sign-on over OIDC or SAML. SCIM keeps user provisioning and deprovisioning in sync with your directory, so offboarding an engineer in your IdP removes their access everywhere.</p>

    <h2>Data Privacy</h2>

    <p>Aspect does not collect any data from customer repositories. However, Aspect does collect data necessary for maintaining and supporting the Product, including operational metrics about Aspect-maintained infrastructure. Aspect also collects information necessary for accurate billing purposes, which includes but is not always limited to, aggregate information about data / workflow processing and the individuals who use it.</p>

    <h2>Security updates</h2>

    <p>Security updates address newly discovered attacks reported to Aspect Build Systems, Inc. by the security research community. Disclosures are made confidentially, under the <a href="/report-a-security-vulnerability">Aspect Responsible Disclosure Policy</a>, allowing for Aspect Build Systems, Inc. to provide security updates to the community prior to public disclosure.</p>

    <p>For more information, please see:</p>

    <h4><a href="/security-updates">Aspect Security Updates</a></h4>

    <p>A summary of security updates made based on past and on-going security analysis.</p>

    <h4><a href="/report-a-security-vulnerability">Aspect Responsible Disclosure Policy</a></h4>

    <p>An overview of how security issues are confidentially reported to and addressed by Aspect Build Systems, Inc.</p>

    <h2>Questions</h2>

    <p>Have a question about how Aspect handles security or data privacy? Email us at <CopyEmail email="security-requests@aspect.build" /></p>
  </div>
</Section>