Security at Enrichley

Last updated: 9 June 2026

We know the data we handle matters. Enrichley is built on modern, security-focused infrastructure, and we apply layered technical and organizational safeguards to protect our systems and the data entrusted to us.

Encryption

• In transit: all traffic to enrichley.com and our API is encrypted in transit (HTTPS).
• At rest: data is encrypted at rest using AES-256 where supported by the underlying service, and we encrypt sensitive fields at the application layer.

Infrastructure

• Hosted on Cloudflare and Amazon Web Services (AWS).
• Edge protection, including DDoS mitigation and a web application firewall, via Cloudflare.
• Secrets and credentials are managed with access-controlled secret storage.

Access controls

• Role-based access on a least-privilege basis; access to production data is limited to personnel who need it.
• Authentication is handled by Clerk.

Monitoring

• Error and performance monitoring via Sentry.
• Logging and audit trails for key systems.

Vendor management

We engage a limited set of sub-processors under data-protection obligations and review them for security. Our current list is at enrichley.com/subprocessors.

Data privacy

How we collect, use, and share personal data is described in our Privacy Policy. Customers can also review our Data Processing Addendum.

Compliance program

Enrichley maintains a privacy and security program designed to support our obligations under the GDPR, UK GDPR, and CCPA/CPRA — including encryption, access controls, logging, vendor review, and secure development practices appropriate to our services. A Data Processing Addendum is available to customers who need one. Enrichley does not currently hold SOC 2 or ISO 27001 certification, and this page makes no certification claim.

Reporting a vulnerability

If you believe you’ve found a security issue, please contact privacy@enrichley.com. We appreciate responsible disclosure.