Secure by design
We designed Gorelo with security as a foundational principle, from encryption to access control.
- SOC 2 Type I attested
- SOC 2 Type II in progress
- Built on Microsoft Azure
- AES-256 at rest
- TLS in transit
How we protect your data
Security in every part of the service
Security by design
- Encryption in transit and at rest
- All data is encrypted in transit with TLS and at rest with AES-256.
- Zero visibility into customer data
- Our systems are designed to process only metadata signals, not your actual data, so your sensitive information stays private.
- Data classification
- We classify data automatically and apply security controls based on its sensitivity.
- Built on Microsoft Azure
- Gorelo runs on Microsoft Azure and benefits from its multiple layers of security and compliance capabilities.
Infrastructure security
- Secure development
- Our backend is written in C# .NET, with secure coding practices and regular code reviews.
- Credential management
- All system credentials are stored in Azure Key Vault, so secrets are never exposed in code or configuration files.
- Continuous monitoring
- We monitor our infrastructure and applications continuously for suspicious activity and potential vulnerabilities.
- Regular backups
- All customer data is backed up continuously, for business continuity and fast recovery.
Access controls
- Role-based access control
- Fine-grained permissions give each user access to only the information and features they need.
- Authentication
- Support for SSO, MFA and advanced authentication methods.
- Audit logging
- Every access and administrative action is logged for accountability.
Compliance
- SOC 2
- We've completed our SOC 2 Type I attestation after an independent audit of our controls for protecting customer data. Our SOC 2 Type II examination is in progress.
- Regulatory alignment
- Our architecture and processes align with industry best practices and regulatory requirements.
- Transparent practices
- We're open about our security practices and keep improving them.
Audit logging
Every access, accounted for
Every access and administrative action is logged, and fine-grained permissions limit each person to what they need.
- Role-based access control
- SSO with Microsoft Entra, plus MFA
- Credentials kept in Azure Key Vault
- Continuous backups of all customer data
Shared responsibility
Security is a partnership
We provide a secure platform and help you put best practices in place for your organization's own security needs.
Security updates
Updated as threats change
We update our security measures regularly as threats and technology change, and our team tracks the latest security developments to keep your data protected.
Report a security concern
To ask about our security practices or report a concern, email security@gorelo.io.
Run your MSP on Gorelo
Try it on your own clients and devices, free for 14 days.
- 14-day free trial
- No credit card
- No lock-ins
- From $99/user/mo