Trust & Security
Privacy and security you can trust
Multiple layers of security protect your team's and customers' data — from 256-bit encryption in transit to enterprise-grade access controls and audited compliance.
-
SOC 2 Type II
Independently audited
-
GDPR
EU compliant
-
HIPAA
Scale plan, BAA available
-
AWS S3 Custom
Bring your own bucket
Trusted by 5m+ people who would rather show than tell
Security & compliance
Built to meet the bar enterprises already trust
SOC 2 Type II certified
Independently audited controls for security, availability, and confidentiality — not a self-assessment.
Enterprise-grade access control
SSO with SAML provisioning and domain lockdown keep every employee inside your security settings — not just the ones who remember to opt in.
Data retention on your terms
Every piece of content can be public, org-only, or password-protected, and set to expire or delete itself after a date you choose.
Encrypted in transit and at rest
256-bit TLS 1.2 protects data moving between your devices and Zight's servers, and the encryption keys are managed by AWS Key Management Service.
Hardened infrastructure
Built on AWS and audited against ISO 27001, 27017, 27018, 9001, SOC 1/2/3, and PCI DSS 3.2 — the same bar enterprises already trust.
Visibility and control
Enterprise plans add document-sharing restrictions, IP allowlisting, and identity-provider integration, so admins can enforce policy without slowing teams down.
Read more about our SOC 2 Type II compliance, our Enterprise Solution, or our Privacy Policy and Terms of Service.
"It has excellent security features. First, it was simple to set up storage on our company servers instead of the Zight cloud, meaning that all of our captures remain under our control. This allows for capturing more sensitive information securely. Second, it's possible to set security on any capture to password-protect or otherwise restrict access to it."
Karen Goeller
Software Delivery Leader, biBerk Business Insurance
FAQ
Questions people ask first
Our DPA is available for review — contact us at support@zight.com to request it.
Zight runs on AWS, which publishes its practices at aws.amazon.com/security — that covers the infrastructure layer Zight is built on.
Keep your data secure without slowing your team down
SOC 2 Type II certified, GDPR-ready, and built on AWS. Want to see everything else Zight does? See all features.