Built and designed for data security and privacy.

Weld moves data securely between your systems and your warehouse with a defense-in-depth approach: strong encryption (in transit and at rest), least-privilege access, secure SDLC, rigorous monitoring, and audited controls. We minimize data handling, prefer ephemeral processing, and keep transparent evidence for your procurement teams.

Weld extracts from approved sources, transports via secure channels, and loads into your destination (e.g., Snowflake, BigQuery, Databricks, Postgres). Processing is ephemeral, and customer data is not retained beyond what’s required to perform the sync, unless it is stored in a Weld managed data warehouse.

• Hosted in the EU on AWS and Google Cloud.
• Private subnets for core services; public ingress via hardened gateways.
• Secrets in managed KMS; zero secrets in code or repos.

• TLS 1.2+ for all connections; HSTS enforced on app endpoints.
• Strong at-rest encryption for managed stores; customer KMS respected where available.
• Key rotation per provider recommendations; strict IAM on key usage.

• SSO/MFA enforced for console access; RBAC with least privilege.
• Break-glass access requires approvals and is fully audited.
• SCIM/automatic deprovisioning supported on eligible plans.

• 2FA
• TLS
• SOC 2 II

• Code review & CI checks (linting, unit/integration tests, SCA).
• Secrets management, dependency pinning, image scanning.
• Change management with approvals; staged rollouts and canaries.

• Centralized logging, metrics, and traces for all services.
• 24/7 on-call rotation; automated alerting for anomalous events.
• Documented IR plan with communication runbooks and post-mortems.

See our status page for uptime and incident history.

• Backups with tested restores; RTO/RPO objectives documented.
• Multi-AZ by default; region recovery procedures maintained.
• BCP reviews annually and after material changes.

SOC 2 Type II: independent audit with continuous controls, report available under NDA, and a SOC 3 report on request. Penetration testing: the Weld platform is penetration tested. Infrastructure: Weld runs on AWS and Google Cloud, whose data centres are certified to SOC 2 and ISO 27001.

Public policies: Data Processing Agreement · Subprocessors