Katalon, the privacy and security of your data is top priority. We maintain a world class security program to protect your data through alignment with industry best practices and frameworks.

Feel confident that you are in the company of other Katalon customers in all industry sectors including highly regulated ones like Healthcare, Government, Banking, and Financial Services.

Our compliance and certifications

We work to meet each of our compliance requirements while helping your business achieve compliance as well.

SOC 2 Type II

ISO/IEC 27001:2022

Infrastructure and processes that keep your data intact

Data Classification

In order to enable licensing and attain maximum value from Katalon’s data analytics, the Katalon Platform requires access to your employee PII like employee first name, last name, corporate email and IP address.

Third-party audits and penetration testing

We engage in independent third party audits for compliance certification and full scope penetration testing.

End to End Encryption

Katalon encrypts all the sensitive data that is at-rest and in-transit using strong and secure encryption algorithms including AES-256 and RSA 2048 bit respectively.

Auditable logs

Katalon team has implemented comprehensive and auditable logs of key activities to enable event investigations and continuous monitoring by the Katalon Security Team.

Security backed by AWS, Stripe

Security credentials are encrypted within AWS Identity and Management services and Stripe is in place to protect your online payment data.

Data Retention and Removal

All your data is stored in an encrypted state, and backed up in line with our internal data retention policies or otherwise negotiated based on your needs.

Robust Data Protection and Operational Resilience

Our MSA and DPA reflect our commitment to both data protection, including compliance with GDPR and CCPA, and the operational resilience of your systems, supporting your compliance with the EU’s Digital Operational Resilience Act (DORA) where applicable.

Role-Based Access Controls

Katalon is pre-configured with several roles that enable different levels of access to different aspects of the platform. This includes control of specific applications, user management other privileged actions.

Please visit Katalon Trust Center for more Supporting documentations

Trust Center

Trusted by CISOs and developers worldwide

We protect and defend the most trustworthy platform for developers everywhere to test and build software.

View a demo

Trusted by CISOs and developers worldwide

If you would like to report a vulnerability to the Katalon team, please click here

Report a vulnerability

Katalon Security

Thanks for reaching out!