1(self.webpackChunk_N_E=self.webpackChunk_N_E||[]).push([[1581],{943:(e,t,a)=>{"use strict";a.d(t,{A:()=>n}),a(5729);var r=a(3545),s=a(6029);let n=(0,r.A)((0,s.jsx)("path",{d:"M22.46 6c-.77.35-1.6.58-2.46.69.88-.53 1.56-1.37 1.88-2.38-.83.5-1.75.85-2.72 1.05C18.37 4.5 17.26 4 16 4c-2.35 0-4.27 1.92-4.27 4.29 0 .34.04.67.11.98C8.28 9.09 5.11 7.38 3 4.79c-.37.63-.58 1.37-.58 2.15 0 1.49.75 2.81 1.91 3.56-.71 0-1.37-.2-1.95-.5v.03c0 2.08 1.48 3.82 3.44 4.21a4.22 4.22 0 0 1-1.93.07 4.28 4.28 0 0 0 4 2.98 8.521 8.521 0 0 1-5.33 1.84c-.34 0-.68-.02-1.02-.06C3.44 20.29 5.7 21 8.12 21 16 21 20.33 14.46 20.33 8.79c0-.19 0-.37-.01-.56.84-.6 1.56-1.36 2.14-2.23z"}),"Twitter")},3563:(e,t,a)=>{(window.__NEXT_P=window.__NEXT_P||[]).push(["/trust-and-security",function(){return a(4203)}])},4203:(e,t,a)=>{"use strict";a.r(t),a.d(t,{default:()=>g});var r=a(6029);let s={src:"/_next/static/media/aws.76a3b5cc.png",height:53,width:80,blurDataURL:"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAgAAAAFCAMAAABPT11nAAAAKlBMVEVMaXH3nQD/rwAmLj0MIkgoMD73nABMRTMgLT8jKzcdKT7/nwD5pQAmLzxZ4PYRAAAADnRSTlMASi0WOYkhSVYgKghecY4I67wAAAAJcEhZcwAACxMAAAsTAQCanBgAAAAqSURBVHicBcGHAQAgCMCwsmQo/79rAtZtY0BF7BaQ7j4JqKjKu8AROfABESIAq1ZTN9QAAAAASUVORK5CYII=",blurWidth:8,blurHeight:5},n=(0,a(3545).A)((0,r.jsx)("path",{d:"M12 7V3H2v18h20V7zm-2 12H4v-2h6zm0-4H4v-2h6zm0-4H4V9h6zm0-4H4V5h6zm10 12h-8V9h8zm-2-8h-4v2h4zm0 4h-4v2h4z"}),"CorporateFareOutlined");var i=a(4543),o=a(1841),d=a(7425),c=a(5669),l=a.n(c),x=a(8588),u=a.n(x),p=a(2160);let m={src:"/_next/static/media/soc2.24e37560.png",height:80,width:81,blurDataURL:"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAgAAAAICAMAAADz0U65AAAATlBMVEX///9sbGzX1tX///+hyeKXl5hkp9H////5+vvO4vDn8PdzsddipdHg7PTQ5fF3uOHI2+np6updXV51dXXw8/Xh4eFnlbFllbN8fHy2tbQWIOj9AAAACnRSTlPu/v///v7+8/7wjud1EwAAAAlwSFlzAAALEwAACxMBAJqcGAAAAD9JREFUeJwFwQcCgCAMALGzgGVv1/8/aoIaX6s3oCWndEYg2x1tgtBK76UFwi2fyBNgurHdBL2Od60BaryIN/xVdQJlSE3dsgAAAABJRU5ErkJggg==",blurWidth:8,blurHeight:8},h=({title:e,description:t})=>(0,r.jsxs)("div",{className:"flex flex-col gap-4 py-[32px]",children:[(0,r.jsx)("h3",{className:"font-commuters-sans text-brand-dark-brown text-[30px] leading-normal font-semibold",children:e}),(0,r.jsx)("p",{className:"text-brand-brown text-[18px] leading-[27px] font-normal",children:t})]}),A=({icon:e,title:t,description:a})=>(0,r.jsxs)("div",{className:"flex flex-col",children:[(0,r.jsx)("div",{className:"mb-4 flex size-20 items-center justify-center",children:e}),(0,r.jsx)("h3",{className:"font-commuters-sans text-brand-dark-brown mb-3 text-left text-[30px] leading-normal font-semibold",children:t}),(0,r.jsx)("p",{className:"text-brand-brown text-left text-[18px] leading-[27px] font-normal",children:a})]});function g(){return(0,r.jsxs)(r.Fragment,{children:[(0,r.jsxs)(l(),{children:[(0,r.jsx)("title",{children:"Trust and Security | Surfboard"},"title"),(0,r.jsx)("meta",{property:"og:title",content:"Trust and Security | Surfboard"}),(0,r.jsx)("meta",{name:"description",content:"Surfboard safeguards your board data with controls built for scrutiny and ready to scale with your team. SOC 2 Type II certified with enterprise-grade security."}),(0,r.jsx)("meta",{property:"og:description",content:"Surfboard safeguards your board data with controls built for scrutiny and ready to scale with your team. SOC 2 Type II certified with enterprise-grade security."}),(0,r.jsx)("link",{rel:"canonical",href:"https://www.surfboard.team/trust-and-security"})]}),(0,r.jsx)(p.A,{}),(0,r.jsx)("div",{className:"to-brand-light-blue flex w-full flex-col items-center bg-gradient-to-b from-white p-[120px] sm:px-16 md:pt-40 md:pb-24",children:(0,r.jsxs)("div",{className:"max-w-4xl text-center",children:[(0,r.jsx)("h1",{className:"font-commuters-sans text-brand-dark-brown mb-6 text-[48px] leading-[72px] font-bold tracking-[-1.44px]",children:"Board management you can trust"}),(0,r.jsxs)("p",{className:"text-brand-brown mb-8 text-[18px] leading-[27px] font-normal",children:["Keep board work moving without compromising security.",(0,r.jsx)("br",{}),"Surfboard safeguards your board data with controls built for scrutiny and ready to scale with your team."]}),(0,r.jsx)("div",{className:"flex justify-center",children:(0,r.jsx)(d.U,{})})]})}),(0,r.jsx)("div",{className:"flex w-full justify-center bg-white px-16 pt-[80px] pb-[120px]",children:(0,r.jsxs)("div",{className:"grid max-w-7xl gap-12 md:grid-cols-3 md:gap-8",children:[(0,r.jsx)(A,{icon:(0,r.jsx)(u(),{src:s,alt:"AWS",width:80,height:80,className:"object-contain"}),title:"Secured on AWS",description:"Hosted on AWS with controls across data centers, networking, and compute. Enterprise-grade infrastru
1cture with encryption everywhere."}),(0,r.jsx)(A,{icon:(0,r.jsx)(n,{className:"text-brand-orange",style:{fontSize:56}}),title:"Access you control",description:"A role-based, multi-tier permission system gives you precise control over organization access and data permissions. Every action is fully logged."}),(0,r.jsx)(A,{icon:(0,r.jsx)(u(),{src:m,alt:"SOC 2",width:80,height:80,className:"object-contain"}),title:"Certified and assured",description:"SOC 2 Type II certified with GDPR-aligned practices. Our security controls and data retention are audited by third-party firms regularly."})]})}),(0,r.jsx)("div",{className:"flex w-full flex-col items-center px-16 py-[120px]",style:{background:"linear-gradient(206deg, #FFE2D9 -31.26%, #EAFDFF 112.08%)"},children:(0,r.jsxs)("div",{className:"max-w-4xl text-center",children:[(0,r.jsx)("h2",{className:"font-commuters-sans text-brand-dark-brown mb-4 text-center text-[48px] leading-[72px] font-bold tracking-[-1.44px]",children:"Surfboard AI"}),(0,r.jsx)("h3",{className:"font-commuters-sans text-brand-dark-brown mb-6 text-center text-[30px] leading-normal font-semibold",children:"Private by design, controlled by you."}),(0,r.jsx)("p",{className:"text-brand-brown text-center text-[18px] leading-[27px] font-normal",children:"You decide what AI can access and can turn features on or off at any time. Your prompts, context, and outputs are protected within your workspaceânever used to train models or shared with third parties without your consent."})]})}),(0,r.jsx)("div",{className:"flex w-full justify-center bg-white px-8 py-[160px]",children:(0,r.jsxs)("div",{className:"max-w-7xl",children:[(0,r.jsx)("h2",{className:"font-commuters-sans text-brand-dark-brown mb-[60px] text-center text-[48px] leading-[72px] font-bold tracking-[-1.44px]",children:"We handle security so you don't have to"}),(0,r.jsxs)("div",{className:"grid gap-[40px] md:grid-cols-2 lg:grid-cols-3",children:[(0,r.jsx)(h,{title:"Data protection",description:"All data is encrypted in transit (TLS 1.2+) and at rest (AES-256). Encryption keys are managed in AWS with strict access controls and separation of duties. Retention and deletion policies are fully configurable."}),(0,r.jsx)(h,{title:"Identity and access",description:"Role-based permissions control what each user can view or change. Production access to customer data in S3 or DynamoDB is just-in-time, least-privilege, time-boxed, approved, and logged for audit."}),(0,r.jsx)(h,{title:"Cloud infrastructure",description:"Surfboard's API and database run on AWS in the United States. We operate a fully serverless stackâAPI Gateway, Lambda, DynamoDB, S3âreducing patch surface and eliminating unmanaged servers."}),(0,r.jsx)(h,{title:"Secure development",description:"We follow a secure software development lifecycle. Every change moves through lower environments before production, with mandatory peer review, automated security checks, and test coverage."}),(0,r.jsx)(h,{title:"Event monitoring",description:"Application, authentication, and infrastructure events are collected centrally and monitored continuously. We follow a documented incident process and notify customers under agreed timelines."}),(0,r.jsx)(h,{title:"Data privacy",description:"We do not share customer content with third parties. Only limited analytics metadata is used to provide the service. Employees with production access sign NDA and complete security training."})]})]})}),(0,r.jsx)(o.A,{}),(0,r.jsx)(i.A,{})]})}},5506:(e,t,a)=>{"use strict";a.d(t,{A:()=>n}),a(5729);var r=a(3545),s=a(6029);let n=(0,r.A)((0,s.jsx)("path",{d:"M19 3a2 2 0 0 1 2 2v14a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2V5a2 2 0 0 1 2-2h14m-.5 15.5v-5.3a3.26 3.26 0 0 0-3.26-3.26c-.85 0-1.84.52-2.32 1.3v-1.11h-2.79v8.37h2.79v-4.93c0-.77.62-1.4 1.39-1.4a1.4 1.4 0 0 1 1.4 1.4v4.93h2.79M6.88 8.56a1.68 1.68 0 0 0 1.68-1.68c0-.93-.75-1.69-1.68-1.69a1.69 1.69 0 0 0-1.69 1.69c0 .93.76 1.68 1.69 1.68m1.39 9.94v-8.37H5.5v8.37h2.77z"}),"LinkedIn")},7425:(e,t,a)=>{"use strict";a.d(t,{U:()=>o});var r=a(6029),s=a(9438),n=a(2203),i=a.n(n);let o=({showArrow:e,children:t,height:a,paddingX:n,paddingY:o})=>(0,r.jsxs)(i(),{className:"group hover:bg-brand-dark-teal z-[2] flex h-[var(--customHeight)] max-w-[223px] items-center justify-center gap-2 rounded bg-[var(--Dark-Teal,#0F727D)] px-[var(--paddingX)] py-[var(--paddingY)] leading-[19.2px] hover:transition hover:duration-150",href:"/start",style:{"--customHeight":a||"auto","--paddingX":n||"24px","--paddingY":o||"14px"},children:[(0,r.jsx)("span",{className:"text-center text-base leading-[19.2px] font-bold text-white",children:t||(0,r.jsx)("span",{children:"Get started"})}),e&&(0,r.jsx)(s.A,{className:"arrowIcon group-hover:translate-x-2",style:{transition:"transform 0.3s",transitionTimingFunction:"ease-in-out",height:"24px",width:"24px",color:"#FFF"}})]})},9438:(e,t,a)=>{"use strict";a.d(t,{A:()=>n});var r=a(3545),s=a(6029);let n=(0,r.A)((0,s.jsx)("path",{d:"m12 4-1.41 1.41L16.17 11H4v2h12.17l-5.58 5.59L12 20l8-8z"}),"ArrowForward")}},e=>{var t=t=>e(e.s=t);e.O(0,[910,5636,6415,2160,1983,636,6593,8792],()=>t(3563)),_N_E=e.O()}]);
Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.