How PULSE protects your data, the frameworks we align to, and who processes information on our behalf. PULSE is built on SOC 2 Type II and ISO 27001 certified infrastructure. For a security questionnaire, our DPA, or subprocessor notices, contact support@intelalytic.com.
We map our controls to the frameworks our customers rely on. Ready means the controls are implemented and self-attested. Aligned means we build to the standard's requirements. In Progress means an assessment is underway — we never claim a certification we don't hold.
PULSE runs entirely on providers that hold independent SOC 2 and ISO 27001 certifications, and adds its own controls on top: encryption, role-based access, enforced MFA, and a full audit trail.
Application hosting, storage, and compute. SOC 1/2/3, ISO 27001, PCI DSS Level 1, HIPAA-eligible services.
Managed Postgres, authentication, and row-level security. SOC 2 Type II; HIPAA available under BAA.
Frontend hosting and global edge delivery. SOC 2 Type II, ISO 27001.
Source control and CI/CD with code review and dependency scanning. SOC 2 Type II, ISO/IEC 27001.
These certifications cover the infrastructure layer. PULSE layers its own encryption, access control, and audit controls above it.
AES-256 at rest and TLS 1.2 or higher in transit, everywhere your data lives or moves.
Role-based, least-privilege access with optional and admin-enforced MFA, plus tenant isolation via Postgres row-level security.
A full activity log records logins, changes, and role updates, with alerting, testing, and an incident-response process.
Automated backups and tested recovery so your data survives failure.
Hosted on AWS in the United States, with contractual safeguards for any transfer and data export on demand — no lock-in.
Source and CI on GitHub with code review and dependency scanning before anything ships.
The core processors behind PULSE, each under contract with data-protection terms no less protective than our DPA. Subscribe to change notices at support@intelalytic.com.
| Sub-processor | Purpose | Region | Scope |
|---|---|---|---|
| Amazon Web Services | Application hosting, storage & compute | United States | Core |
| Supabase | Managed Postgres, authentication & row-level security | United States (AWS) | Core |
| Vercel | Frontend hosting & global edge delivery | United States / global edge | Core |
| GitHub | Source control & CI/CD | United States | Core |
| Resend | Transactional & notification email | United States | Core |
| Stripe | Payment processing & billing | United States | Core |
| Anthropic | AI features (lead scoring, insights, drafting) | United States | Core |
We publish notice before adding or changing a sub-processor. Request the current register and change notifications from support@intelalytic.com.
Request our questionnaire responses, DPA, and sub-processor notifications.