Compliance Certifications
We maintain the highest industry standards and regularly undergo rigorous third-party audits to ensure compliance.
CompliantSOC 2 Type II
Audited controls for security, availability, and confidentiality trust service principles with an observation period.
CompliantHIPAA
US regulation that safeguards medical data privacy and security. Essential for healthcare providers, insurers, and related tech.
In ProgressISO 27001
A global standard that defines best practices for information security management systems (ISMS) — used across industries.
In ProgressSOC 2 Type I
Audited controls for security, availability, and confidentiality trust service principles.
In ProgressGDPR
EU regulation that governs personal data protection and privacy for individuals within the EU. Applies globally to anyone handling EU data.
Resource Library
Access our security documentation, policies, and compliance reports.
SOC 2 Type II
Compliance report
HIPAA Internal Privacy Policy
HIPAA Internal Privacy Policy document
Age Verification and Parental Consent Policy
Age Verification and Parental Consent Policy document
Personnel Security Policy
Personnel Security Policy document
Acceptable Use Policy
Acceptable Use Policy document
Data Protection, Accountability, and Privacy by Design Policy
Data Protection, Accountability, and Privacy by Design Policy document
Security controls
Our comprehensive security program includes controls across multiple domains to protect your data.
Access Control & Authorization
Compliance with Regulations & Standards
Data Protection & Privacy
Governance & Oversight
IT & Operational Security
Risk & Compliance Management
Access Control & Authorization
Compliance with Regulations & Standards
Data Protection & Privacy
Governance & Oversight
IT & Operational Security
Risk & Compliance Management
Access Control & Authorization
Compliance with Regulations & Standards
Data Protection & Privacy
Governance & Oversight
IT & Operational Security
Risk & Compliance Management
Subprocessors directory
We carefully select and monitor all third-party services that process data on our behalf.
Railway
Cloud Infrastructure & Platform Services
SigNoz
LOG
AWS
Cloud Infrastructure & Platform Services
PostHog
Business Apps & Productivity
PlanetScale
DSW
Vercel
Cloud Infrastructure & Platform Services
Frequently Asked Questions
Find answers to common questions about our security and compliance practices.
Our Security Commitment
At Kernel, security isn't just a feature—it's foundational to everything we build. Our security-first mindset drives our development processes, infrastructure decisions, and organizational policies. We treat the data entrusted to us—whether from our customers, their end users, or anyone who interacts with our organization—with the utmost care and responsibility. Security is embedded in our DNA, enabling us to deliver innovative solutions without compromising on protection.
