OpsTicket Security
Security is foundational to OpsTicket. We protect your data with enterprise-grade encryption, strict access controls, and continuous monitoring aligned with federal security standards.
Encryption
- TLS 1.3 for all data in transit
- AES-256 encryption for all data at rest
- End-to-end encryption for sensitive ticket data
Compliance
- SOC 2 Type II aligned controls
- GDPR-ready data processing and privacy controls
- FISMA-aligned security framework
- NIST 800-53 control mapping
- FedRAMP-aligned architecture
Infrastructure Security
- Continuous vulnerability scanning and penetration testing
- Role-based access control (RBAC) with least-privilege
- Multi-factor authentication (MFA) enforcement
- Automated security patching and updates
- 24/7 security monitoring and alerting
- Incident response plan with defined SLAs
Data Residency
All data is stored in US-based data centers. Enterprise customers can select specific regions for data residency compliance.