Security you
can build on
Your company's data stays in your control. Sledge does the security work so you don't have to.
An independent lab has checked how Sledge is built. Your data is encrypted while it travels and while it's stored. And nothing leaves your company — no document, no payment — until a person on your team approves it.
How Sledge protects your data
Secure from day one
Security is part of how we build. Every new feature is reviewed for vulnerabilities before it ships, with automated code and dependency scanning in our CI/CD pipeline and secure coding practices enforced across the team.
Your data, your control
With Sledge, your data stays yours. We never sell it, and we never use it to train third-party AI models. You control retention, export and deletion.
Encryption and access you can trust
Data is encrypted in transit with TLS 1.2+ and at rest with AES-256, following an established data classification policy. Role-based access, enforced MFA, and full audit logging control who can reach your data.
Least-privilege access, enforced
Access to your data is granted on a least-privilege basis and logged. Sledge supports SSO and SAML, granular role-based permissions, and SCIM provisioning, with MFA enforced on every internal system and admin action. Full audit logs record who accessed what and when.
Always on. Always protected.
We monitor systems, networks and data around the clock to detect and respond to threats, vulnerabilities and anomalies in real time, backed by a documented, tested incident response plan and 24/7 on-call.
View the status page (opens in a new tab)Built to stay up
Sledge runs across multiple availability zones with automated daily backups and point-in-time recovery. We target 99.9% uptime, publish a live status page, and regularly test our business continuity and disaster recovery plans so your jobs keep moving.
View the status page (opens in a new tab)Multi-layer defense with maximum resilience
Sledge uses a layered defense-in-depth strategy — hardened infrastructure, network isolation, least-privilege access and continuous monitoring — so a single failure never exposes your business.
Your data is secure where it lives
Sledge stores your data with established enterprise cloud providers, encrypted and redundant, in US regions. On top of that, Sledge holds its own independent CASA Tier 2 assessment.
Encrypted, org-scoped database
Your records sit in shared tables carrying an organization scope, and are encrypted at rest with AES-256.
Enterprise cloud facilities
Hosted in established enterprise cloud data centers in US regions.
Network isolation
Private subnets, managed firewalls and DDoS protection keep production isolated from the public internet.
Redundancy and backups
Data is replicated across multiple availability zones with automated daily backups and point-in-time recovery.
Physical security
The facilities your data lives in enforce 24/7 physical access control, surveillance and biometric entry.
Continuously hardened
Infrastructure is patched, scanned and monitored around the clock — you never manage a server or a security update.
Sledge is trusted AI
The Trust Center highlights everything Sledge does to protect your data — certifications, documentation, security posture and trusted partners.
Frequently asked questions
More answers, plus the documents themselves, live in the Trust Center.
No. Sledge does not sell your data, does not hand it to advertisers, and does not use it to train third-party AI models. Your data is in Sledge to run your business.
Bank connections run through a regulated payments provider, so Sledge never stores your bank passwords and never holds a full card number. And no payment leaves your account until a person on your team approves it.
Fiona works inside your company’s Sledge account, using a defined set of tools. She reads and drafts on her own. Anything that leaves your company — sending to an outside party, moving money, publishing something public — stops and waits for a person on your team to approve it.
Yes. Ask and Sledge deletes your data. Email security@getsledge.com and the security team will handle it.
Run your back office on software you can vouch for
Independently assessed. No contracts. No setup fees.