Trust Center
Welcome to the GUIDEcx Trust Center. This portal provides our customers, partners, and visitors with a transparent, high-level overview of our security, availability, and confidentiality practices.
At GUIDEcx, we provide a premier Client Onboarding Platform. Because we serve as a critical component of your onboarding experience, we are deeply committed to safeguarding your data and maintaining a secure, reliable environment. This Trust Center serves as a central resource to outline our comprehensive security posture, operational practices, and compliance standards.
Our Trust Posture & Commitments
- Independent Validation (SOC 2 Type II): Our Client Onboarding Platform undergoes rigorous independent examinations. GUIDEcx maintains a SOC 2 Type II certification covering the Trust Services Criteria for Security, Availability, and Confidentiality. This report validates the design and operating effectiveness of our internal controls over an extended period.
- Data & System Protection: We employ continuous vulnerability and vulnerable dependency scans using static code analysis on our production application source code. To further protect our systems, we engage third-party vendors to perform regular network and application-layer penetration testing, simulating real-world attack scenarios to identify and remediate potential risks.
- Operational & Physical Security: Security is embedded into our company culture. We maintain management-approved security policies—including a comprehensive Physical Security Policy—to protect our headquarters, workstations, and physical assets. These policies are reviewed annually by IT management, with changes approved by our CTO. Additionally, all employees and contractors are bound by a strict Code of Conduct to ensure the proper handling of sensitive information and intellectual property.
- Transparency & Accountability: We maintain clear Terms of Service (or Master Service Agreements) detailing our security and availability commitments. To mitigate the financial impacts of potential business disruptions, we also maintain comprehensive cybersecurity insurance.
How to Use This Trust Center
We believe in proactive communication and accountability. If you ever identify or suspect any security, confidentiality, integrity, or availability failures, we provide a dedicated disclosure process for external users to report incidents and concerns directly to our team.
We invite you to explore the rest of this portal for detailed documentation, specific policy disclosures, and evidence of our ongoing commitment to security and trust.
Risk Profile
We have secure, reliable hosting that customers can depend on. We are happy to provide details about our risk mitigation practices and recovery objectives upon request.
Self-Assessments
We are working on our security compliance. We can provide completed questionnaires upon request.
Data Security
We follow industry best practices for data security. We are happy to provide more details about our data security practices upon request.
AI
We take the usage of AI seriously in our organization and work to ensure security and reliability of the AI.
ESG
We prioritize and take environmental, social, and governance (ESG) considerations seriously in our operations and decision-making processes.
Data Privacy
Privacy of customer data is top of mind. We follow industry best practices and follow all applicable privacy regulations.
Access Control
Access is tightly monitored and controlled at our company. We are happy to provide more details about our access control practices upon request.
Network Security
We protect our corporate network against external & internal threats.
Security Grades
We are constantly monitoring the security of our website. We will post our grades from public security rating agencies when they become available.
Risk Management
We have a dedicated team that manages security risks. We are happy to provide more details about our risk management practices upon request.
Asset Management
We have strict asset management policies in place to ensure that all assets are accounted for and secure.
BC/DR
We have a business continuity plan in place to ensure that we can continue to operate in the event of a disaster.
Training
We provide security awareness training to all employees to ensure that they are aware of security best practices.
Physical & Environment
We have physical and environmental controls in place to ensure that our data centers are secure and reliable.
Continuous Monitoring
We continuously monitor our systems for security threats and vulnerabilities. We are happy to provide more details about our continuous monitoring practices upon request.