Security & Trust
For IT, security and procurement review
How we protect your account and data, and what we offer Enterprise customers on request.
Infrastructure
NTPSignal runs on US-based cloud infrastructure. Data is encrypted in transit (TLS 1.2+) and at rest. Production access is limited to named engineers with multi-factor authentication.
Authentication
Email and PIN sign-in on all plans. Single sign-on via SAML 2.0 or OIDC (Okta, Microsoft Entra ID, Google Workspace) on Enterprise. Sessions expire after inactivity.
Access controls
Territory and vertical entitlements are enforced server-side on every request. Enterprise plans add per-division entitlements and manager roles. Audit log export is on the roadmap for Q1 2027.
Backups and continuity
Databases are backed up daily and retained for 30 days. Backups are tested on a regular schedule.
Incident response
We will notify affected customers of a confirmed security incident involving their data without undue delay and no later than 72 hours after confirmation.
Subprocessors
We use a small number of service providers to run NTPSignal: cloud hosting, transactional email delivery and payment processing. A current list is available on request and we give 30 days’ notice before adding one.
Support and availability
Territory and Regional: email support, response within one business day. National: response within four business hours. Enterprise: dedicated support contact and a 99.5% monthly uptime target with service credits defined in the agreement.
Enterprise documents
A Data Processing Agreement, security questionnaire responses and our SLA are available to Enterprise customers on request. Contact security@ntpsignal.com.