Security, privacy and trust at AhaSlides

Q: Where is our data hosted?

On AWS, in the US and the EU. Talk to us if you need a specific region for your organisation.

Q: Can we get a Data Processing Agreement?

Yes. A DPA is available on request. Contact our team and we will share it.

Q: Is AhaSlides accessible?

Our audience app meets WCAG 2.1 AA and we publish a VPAT. We are extending accessibility across the rest of the product. See our Accessibility page.

Everything your security and procurement teams need in one place. How we protect your data, where it is hosted, the documents you can request, and the certifications we are working towards.

Talk to our team Security overview

How we protect your data

Encryption and access control

Encrypted in transit and at rest in our core databases and file storage. Role-based access, with MFA for all staff systems, reviewed regularly.

Hosting and data residency

Hosted in the US and the EU. Your data is stored in the region you choose: US or EU. Daily backups and network protection are in place.

Independent testing

We run annual third party penetration tests and continuously monitor our security controls through Vanta.

Trust documents and resources

The documents your security and procurement teams ask for, ready to open or request. Each one opens in its own page.

Security overview

How we secure your data, our controls, and where to send questions.

Read overview

Privacy Policy (GDPR and PDPA)

How we collect, use and protect personal data under GDPR and Singapore PDPA.

Read policy

Sub-processors

Our maintained list of sub-processors, with a change log. More than 20 vendors.

View list

Accessibility and VPAT

Our accessibility commitments and the VPAT for the audience app.

View VPAT

AI use policy

How AhaSlides uses AI, and how we handle your data when you do.

Read policy

Terms of Service

The terms that govern your use of AhaSlides.

Read terms

System status

Live and historical uptime for AhaSlides services.

View status

Vulnerability disclosure

How to report a security issue, and our security.txt.

How to report

Compliance you can check, certifications on the way

We comply with GDPR and Singapore PDPA, publish our sub-processors, and provide a Data Processing Agreement on request. SOC 2 Type II and ISO 27001:2022 are both in progress, managed through Vanta. We will publish each report and certificate here as soon as it is awarded.

Read our security overview

Image guide: Get image from CMS set

"It was key that the tool was prepared for large crowds and allowed the simultaneous connection of a considerable number of people, something that AhaSlides offered us with total reliability."

Paula Angulo

Marketing Manager at Casademont Zaragoza

Security FAQ

Do you have SOC 2 or ISO 27001?

Both are in progress and managed through Vanta. We will publish each report and certificate here once awarded, and can share our current status on request.

Where is our data hosted?

In the US and the EU. Talk to us if you need a specific region for your organisation.

Can we get a Data Processing Agreement?

Need a DPA? Contact us.

Do you keep a list of sub-processors?

Yes, a maintained public list with a change log. See our Sub-processors page.

Is AhaSlides accessible?

Working towards WCAG 2.1 AA. We publish a VPAT for the audience app. See our Accessibility page.