ALERTOPS TRUST CENTER
AlertOps is independently audited, penetration tested and hosted on Microsoft Azure. Review our controls and request our audit reports, all in one place.
SOC 2 Type II
Independent third-party examination
Twice-yearly pen test
Run by independent third-party testers
Microsoft Azure
Inherits Azure infrastructure controls
COMPLIANCE AND ASSURANCE
Audit reports are shared on request with customers and prospects in active evaluation. Certifications that belong to Microsoft Azure are labeled as Microsoft’s.
An independent audit firm examined our security controls. A Type II report tests that our controls operated effectively over time, not just on a single day. The full report is available on request.
Independent third-party testers run penetration tests twice a year, and we test each release cycle. Findings are tracked to closure. The executive report is available on request.
Production runs on Microsoft Azure, which maintains FedRAMP authorization, ISO 27001 and SOC attestations for its infrastructure. These are Microsoft’s certifications, not AlertOps’ own.
Azure’s FedRAMP, ISO 27001 and SOC attestations cover Microsoft’s infrastructure layer. AlertOps inherits those controls and does not claim them as its own certifications.
SECURITY CONTROLS
The security settings your own team configures inside AlertOps.
Single sign-on
SAML, OIDC and Active Directory
Identity provider policies
With SSO, your own MFA and session rules apply
Role-based access control
Limit what each role can see and change
US data residency
Keep customer data in the United States
Data deletion on request
Removed within our deletion SLA
Audit trail
Who changed what, and when
RELIABILITY
AlertOps runs on Microsoft Azure with multi-region redundancy, multi-location backups and automated failover. Azure’s platform SLA is 99.99%.
Tracked on the status page
Web ApplicationInbound IntegrationsOutbound IntegrationsNotifications Delivery ServiceMobile App
90-day uptime, incident history, email notifications, Atom and RSS feeds.
HOW AN ALERT REACHES A RESPONDER
2 hours
Recovery time objective
2 hours
Recovery point objective
99.99%
Azure platform SLA
AI TRUST
OpsIQ is the AI engine behind alert deduplication and correlation. Ada by AlertOps is the chat assistant. Both follow the same data rules.
THE AI ENGINE
Deduplicates and correlates incoming alerts, so your responders see one incident instead of a flood.
THE CHAT ASSISTANT
Responders work with AlertOps AI through conversation.
AlertOps does not train AI models on customer data. This covers OpsIQ and Ada.
OpsIQ and Ada recommend and summarize. People approve the actions that change an incident.
Any model provider that touches customer data is included in our DPA.
DOCUMENT LIBRARY
Security overview
The five pillars of how AlertOps protects data and operations
Responsible disclosure policy
How to report a vulnerability and what to expect
Status page and uptime history
Live platform status, 90-day uptime and past incidents
Security whitepaper
Architecture, data flow, encryption, access control and incident response
Data Processing Addendum
DPA template for procurement and legal review
Business continuity and disaster recovery summary
Recovery approach, 2-hour RTO and RPO, failover and backup testing
AI data-handling disclosure (OpsIQ and Ada) Draft needed
How OpsIQ and Ada process and protect customer data
SOC 2 Type II report
Full auditor report with control test results
Penetration test executive report
Scope and findings from the latest third-party test
No documents match your search.
Security overview
The five pillars of how AlertOps protects data and operations
Responsible disclosure policy
How to report a vulnerability and what to expect
Status page and uptime history
Live platform status, 90-day uptime and past incidents
No documents match your search.
Security whitepaper
Architecture, data flow, encryption, access control and incident response
Data Processing Addendum
DPA template for procurement and legal review
Business continuity and disaster recovery summary
Recovery approach, 2-hour RTO and RPO, failover and backup testing
AI data-handling disclosure (OpsIQ and Ada) Draft needed
How OpsIQ and Ada process and protect customer data
SOC 2 Type II report
Full auditor report with control test results
Penetration test executive report
Scope and findings from the latest third-party test
No documents match your search.
PRIVACY AND LEGAL
GDPR-aligned and CCPA-aware practices, with US data residency available. We delete customer data on request.
Template DPA for GDPR and CCPA requirements.
Public
Ask us to delete your organization’s data.
Keep customer data in the United States.
Certificate available for procurement review.
Seen something that does not look right? Email security@alertops.com with the details. We acknowledge reports, investigate and keep you updated until the issue is resolved. Read the responsible disclosure policy before you start.
SECURITY REVIEW FAQ
AlertOps runs on Microsoft Azure with multi-region redundancy. US data residency is available.
Yes. An independent audit firm has completed a SOC 2 Type II examination. The full report is shared on request with customers and prospects in active evaluation. Use a request above.
Independent third-party testers run penetration tests on the platform twice a year, and we test each release cycle. The executive report is shared on request with customers and prospects in active evaluation.
AlertOps is hosted on Microsoft Azure, which maintains FedRAMP authorization for its infrastructure. AlertOps itself has not pursued FedRAMP authorization.
We commit to notifying affected customers within 72 hours of confirming a breach that involves their data.
Azure’s platform SLA is 99.99%. AlertOps’ own service SLA is [confirm: 99.9% on Enterprise]. The status page shows live availability, 90-day uptime and past incidents.
Our recovery time objective and recovery point objective are both 2 hours. The business continuity and disaster recovery summary has the detail.
No. AlertOps does not train AI models on customer data. This covers OpsIQ, the engine that deduplicates and correlates alerts, and Ada by AlertOps, the chat assistant.
TRUSTED BY
4.7 / 5
Rated on G2
9.3
G2 Quality of Support
Our security team answers reviewer questions directly.
