Trust Center

Security at Nitro

Nitro is dedicated to maintaining the highest standards of security across all products, services, and infrastructure. Our security program combines technical safeguards, organizational controls, continuous monitoring, and risk management practices to protect customer data, ensure compliance with industry standards and regulations, and maintain trust with our users.

Contact the Nitro Privacy Team

What Is Nitro’s Information Security Statement?

Nitro continuously invests in state-of-the-art security measures to protect customer data and maintain regulatory compliance. As required under multiple data protection regulations, we implement technical and organizational controls to ensure security is proportional to the risk associated with processing personal information. These controls are regularly reviewed and updated to align with the most stringent industry standards, giving customers confidence that their data is handled securely across all Nitro products and services.

Read the statement

How does Nitro secure its data centers?

Nitro partners with Microsoft Azure and AWS to host its services, leveraging their industry-leading security controls and compliance certifications. Data centers are strategically located in Amsterdam, Dublin, Paris, Marseille, Geneva, Frankfurt, and Zurich to support regional requirements and redundancy.

Our cloud partners implement physical security, network protections, monitoring, and compliance programs to safeguard customer data. For more details, you can explore Microsoft and AWS trust centers, which outline their security measures and best practices.

Compare compliance by solution

Blog Header - How to Improve Security and Retain Customers Using Qualified Electronic Signatures

What is Nitro’s responsible disclosure policy?

Nitro values the contributions of security researchers who help maintain the safety and integrity of our services. We recognize that even with robust security measures, vulnerabilities can exist, and we encourage responsible disclosure to address issues promptly and effectively.

Qualifying vulnerability reports may be eligible for rewards, reflecting our appreciation for the researchers who help us improve our security posture. This program ensures that user information remains protected while fostering collaboration with the wider security community.

View the policy

How does Nitro protect customer data?

Nitro employs technical safeguards, organizational controls, and continuous monitoring to secure customer data across all products and services. Measures include encryption, access management, secure software development practices, and vulnerability management, ensuring compliance with industry standards and global regulations.

Where are Nitro’s data centers located and how are they secured?

Nitro partners with Microsoft Azure and AWS to host its services, with data centers in Amsterdam, Dublin, Paris, Marseille, Geneva, Frankfurt, and Zurich. These facilities are protected with physical security, network protections, monitoring, and compliance programs to ensure data safety and redundancy.

How does Nitro work with cloud providers to ensure security?

Nitro leverages the industry-leading security and compliance certifications of Azure and AWS. Our cloud partners provide transparent trust centers detailing their security controls, helping Nitro maintain a secure and compliant infrastructure.

What is Nitro’s Responsible Disclosure Policy?

Nitro encourages security researchers to responsibly disclose vulnerabilities they identify. Reported issues are addressed promptly, and qualifying vulnerabilities may be eligible for rewards, helping Nitro continuously improve its security posture.

How often does Nitro update its security measures?

Security controls, risk assessments, and technical safeguards are updated regularly to respond to evolving threats, maintain compliance with regulations, and protect customer data.

How does Nitro ensure compliance with industry standards?

Nitro integrates security best practices across its software development lifecycle, cloud infrastructure, and organizational policies. Compliance is maintained with global standards such as ISO 27001, SOC 2, HIPAA, and Data Privacy Frameworks.