Ply Trust Center

Keeping your data secure and private is our top priority, as it should be.

Security first

We are committed to keeping our customers’ data private and secure by aligning with the strictest standards available. Or in the words of our CTO, “I don’t sleep at night, so my customers can.”

Privacy is a basic right

Privacy is not just a legal requirement for us, it’s a fundamental right that we believe in wholeheartedly. We care deeply about protecting your privacy and doing what’s best for you and your data.

Compliance and certification

SOC 2 Type II

Ply undergoes an annual SOC 2 Type II audit, meeting the most rigorous security, availability and confidentiality standards in the industry. Report is available upon request.

ISO 27001

ISO 27001 is the world’s best-known standard for information security management systems (ISMS) and their requirements.

CSA

STAR encompasses the key principles of transparency, rigorous auditing, and harmonization of standards outlined in the Cloud Controls Matrix (CCM).

GDPR

Ply has made extensive efforts to support customers subject to GDPR. See our Privacy Policy for more details.

Cyber Essentials

Cyber Essentials is a standard by the The United Kingdom’s National Cyber Security Centre (NCSC) to guard against cyber attacks.

Protected by CloudFlare

Cloudflare is a global network designed to make products secure, private, fast, and reliable.

SOC 2 Type II

Ply undergoes an annual SOC 2 Type II audit, meeting the most rigorous security, availability and confidentiality standards in the industry. Report is available upon request.

ISO 27001

ISO 27001 is the world’s best-known standard for information security management systems (ISMS) and their requirements.

CSA

STAR encompasses the key principles of transparency, rigorous auditing, and harmonization of standards outlined in the Cloud Controls Matrix (CCM).

GDPR

Ply has made extensive efforts to support customers subject to GDPR. See our Privacy Policy for more details.

Cyber Essentials

Cyber Essentials is a standard by the The United Kingdom’s National Cyber Security Centre (NCSC) to guard against cyber attacks.

Protected by CloudFlare

Cloudflare is a global network designed to make products secure, private, fast, and reliable.

Infrastructure and application security

Ply servers are hosted by Amazon Web Services (AWS), which is certified SOC 2 Type 2. AWS has state-of-the-art data center security. Data centers are secured with a variety of physical controls to prevent unauthorized access. Find more information here.

3rd Party Pen Testing

Ply completes annual 3rd party penetration tests by a Google certified assessor.

Web Application Firewall

Web App firewall with automatic updates to block against the latest threats spotted around the world.

DNSSEC

Securing data exchanged in the DNS to block against DNS hijacking attacks.

DDoS Protection

Application level DDoS protection from CDN provider and network level DDoS protection from cloud provider.

Data encrypted in-transit and at rest

Ply uses AES encryption at rest in addition to securing network communication with TLS 1.2 for encrypting data in transit.

Spoofing Protection

Network spoofing protection is enabled in our cloud provider which prevents adversaries from spoofing traffic or arp addresses.