Single sign-on and directory sync
Kadence integrates with the identity platforms your teams already use. SSO and directory sync reduce every login to one step, for security and convenience.
Security and trust
Secure, tested and controlled.
Kadence runs enterprise-grade security practice to protect customer data: SOC 2 and Cyber Essentials, single sign-on and directory sync, data encrypted in transit and at rest, and third-party penetration tests at least annually. The evidence lives here.
SOC 2 and Cyber Essentials
Kadence is SOC 2 compliant and maintains Cyber Essentials certification. Our infrastructure partners are SOC 2 compliant and ISO 27001 certified, and are continuously monitored.
GDPR and CCPA
We store only the data necessary for the solution to function. All data is encrypted in transit via HTTPS and TLS 1.2 or later, and at rest.
More controls
How the platform is kept secure.
Penetration testing
All systems are penetration-tested at least annually by third-party specialists. All mobile apps are tested to the OWASP MASVS standard.
Security training
Consistent, current security training for all staff, keeping the team informed of new threats and best practice.
Continuous control monitoring
Security controls are monitored across the organization through automated alerts and evidence collection supported by Drata.
Dedicated customer support
The Kadence customer experience team is always ready to help.
Evidence
What your review can read today.
Trust portal
Kadence's dedicated trust portal, at trust.kadence.co.
Open the trust portal (opens in a new tab) →Security whitepaper
The security protocols Kadence uses to protect customer data: reliability, encryption, data residency, penetration testing and incident response.
Open security whitepaper →Sub-processors
The current list of sub-processors and where data is processed.
Open sub-processors →Privacy policy
How personal data is collected, used and protected.
Open privacy policy →Implementation
How a rollout works: the stages, who owns each and what your team provides.
Open implementation →Contact us
For anything your review needs that is not covered here, contact the team.
Open contact us →
Statements as published on kadence.co/security in September 2026. Kadence does not claim its infrastructure providers' ISO 27001 certification as its own.
Next step
Start the security review with us.
Book a demo and bring your security questions.