Ply Trust Center
Keeping your data secure and private is our top priority, as it should be.
Security first
We are committed to keeping our customers’ data private and secure by aligning with the strictest standards available. Or in the words of our CTO, “I don’t sleep at night, so my customers can.”

Privacy is a basic right
Privacy is not just a legal requirement for us, it’s a fundamental right that we believe in wholeheartedly. We care deeply about protecting your privacy and doing what’s best for you and your data.

Compliance and certification

SOC 2 Type II
Ply undergoes an annual SOC 2 Type II audit, meeting the most rigorous security, availability and confidentiality standards in the industry. Report is available upon request.

ISO 27001
ISO 27001 is the world’s best-known standard for information security management systems (ISMS) and their requirements.

CSA
STAR encompasses the key principles of transparency, rigorous auditing, and harmonization of standards outlined in the Cloud Controls Matrix (CCM).
GDPR
Ply has made extensive efforts to support customers subject to GDPR. See our Privacy Policy for more details.

Cyber Essentials
Cyber Essentials is a standard by the The United Kingdom’s National Cyber Security Centre (NCSC) to guard against cyber attacks.

Protected by CloudFlare
Cloudflare is a global network designed to make products secure, private, fast, and reliable.
Infrastructure and application security
Ply servers are hosted by Amazon Web Services (AWS), which is certified SOC 2 Type 2. AWS has state-of-the-art data center security. Data centers are secured with a variety of physical controls to prevent unauthorized access. Find more information here.
3rd Party Pen Testing
Ply completes annual 3rd party penetration tests by a Google certified assessor.
Web Application Firewall
Web App firewall with automatic updates to block against the latest threats spotted around the world.
DNSSEC
Securing data exchanged in the DNS to block against DNS hijacking attacks.
DDoS Protection
Application level DDoS protection from CDN provider and network level DDoS protection from cloud provider.
Data encrypted in-transit and at rest
Ply uses AES encryption at rest in addition to securing network communication with TLS 1.2 for encrypting data in transit.
Spoofing Protection
Network spoofing protection is enabled in our cloud provider which prevents adversaries from spoofing traffic or arp addresses.