Your project and client data, protected by design
The work you run in Arcane Desk (client details, project plans, and delivery records) is business-critical. We treat it that way, with defense in depth, independent audits, and privacy built into every layer.
Encryption everywhere
Data is encrypted in transit with TLS 1.2+ and at rest with AES-256. Keys are managed and rotated automatically.
Access control
Granular role-based permissions, SAML SSO, SCIM provisioning, and enforced least-privilege access for every account.
Hardened infrastructure
Hosted on SOC 2 certified cloud infrastructure with network isolation, automated patching, and continuous hardening.
Monitoring and audit
Full audit logs for every action, 24/7 monitoring, and anomaly detection so nothing goes unnoticed.
Backups and recovery
Point-in-time backups, geographic redundancy, and a tested disaster recovery plan keep your data safe and available.
Responsible disclosure
A published security policy and a bug bounty program let researchers report issues quickly and safely.
Audited, certified, and compliant
Independent auditors verify our security controls, and we align with the regulations our customers operate under. Certification reports are available on request under NDA.
Built to stay up and stay private
0-bit
AES encryption at rest
0.99%
Uptime SLA
0/7
Threat monitoring
0h
Breach notification
Our commitments to you
- You own your data. You can export or delete it at any time.
- We never sell your data or use it to train external models.
- Sub-processors are vetted and reviewed regularly, and the current list is available on request.
- Breach notification within 72 hours, as a policy, not just a promise.
Want the full security package?
Request our SOC 2 report, data processing agreement, and security whitepaper from our team.