GhostEye logo
Live monitoring by Delve
GhostEye Compliance Report
GhostEye is in compliance with security best practices, has implemented and is monitoring comprehensive controls, and maintains policies to outline its security procedures.
Ctrl+K

Compliance Certifications

We maintain the highest industry standards and regularly undergo rigorous third-party audits to ensure compliance.

No compliance frameworks available at this time.

Please check back later or contact for more information.

Resource Library

Access our security documentation, policies, and compliance reports.

PDF

HIPAA Internal Privacy Policy

HIPAA Internal Privacy Policy document

Updated: December 2025
PDF

Personnel Security Policy

Personnel Security Policy document

Updated: December 2025
PDF

Acceptable Use Policy

Acceptable Use Policy document

Updated: December 2025
PDF

Information Security Management System Manual

Information Security Management System Manual document

Updated: December 2025
PDF

Information Security Policy

Information Security Policy document

Updated: December 2025
PDF

Data Retention and Disposal Policy

Data Retention and Disposal Policy document

Updated: December 2025

Security controls

Our comprehensive security program includes controls across multiple domains to protect your data.

Access Control & Authorization

LIVE
Access Control Procedures
Completed
Access Restricted to Modify Infrastructure
Completed
Access Review of Infrastructure
Completed

Compliance with Regulations & Standards

LIVE
Breach Notification Communication
Completed
e​Phi Policy Accessibility Evidence
Completed
Information Security Policies and Procedures
Completed

Data Protection & Privacy

LIVE
Access Restricted to Modify Infrastructure
Completed
Alerts and Remediation
Completed
Asset Disposal Procedure
Completed

Governance & Oversight

LIVE
Background Checks
Completed
Customer Support Issue Submission Form
Completed
Customer Support Issues Resolved
Completed

IT & Operational Security

LIVE
Alerts and Remediation
Completed
Application Outages
Completed
Asset Disposal Procedure
Completed

Risk & Compliance Management

LIVE
Access Control Procedures
Completed
Alerts and Remediation
Completed
Board Charter
Completed

Access Control & Authorization

LIVE
Access Control Procedures
Completed
Access Restricted to Modify Infrastructure
Completed
Access Review of Infrastructure
Completed
Alerts and Remediation
Completed

Compliance with Regulations & Standards

LIVE
Breach Notification Communication
Completed
e​Phi Policy Accessibility Evidence
Completed
Information Security Policies and Procedures
Completed

Data Protection & Privacy

LIVE
Access Restricted to Modify Infrastructure
Completed
Alerts and Remediation
Completed
Asset Disposal Procedure
Completed
Asset Register List
Completed

Governance & Oversight

LIVE
Background Checks
Completed
Customer Support Issue Submission Form
Completed
Customer Support Issues Resolved
Completed
Employee Annual Performance Reports
Completed

IT & Operational Security

LIVE
Alerts and Remediation
Completed
Application Outages
Completed
Asset Disposal Procedure
Completed
Asset Register List
Completed

Risk & Compliance Management

LIVE
Access Control Procedures
Completed
Alerts and Remediation
Completed
Board Charter
Completed
Board Meeting Minutes
Completed

Access Control & Authorization

LIVE
Access Control Procedures
Completed
Access Restricted to Modify Infrastructure
Completed
Access Review of Infrastructure
Completed
Alerts and Remediation
Completed

Compliance with Regulations & Standards

LIVE
Breach Notification Communication
Completed
e​Phi Policy Accessibility Evidence
Completed
Information Security Policies and Procedures
Completed

Data Protection & Privacy

LIVE
Access Restricted to Modify Infrastructure
Completed
Alerts and Remediation
Completed
Asset Disposal Procedure
Completed
Asset Register List
Completed

Governance & Oversight

LIVE
Background Checks
Completed
Customer Support Issue Submission Form
Completed
Customer Support Issues Resolved
Completed
Employee Annual Performance Reports
Completed

IT & Operational Security

LIVE
Alerts and Remediation
Completed
Application Outages
Completed
Asset Disposal Procedure
Completed
Asset Register List
Completed

Risk & Compliance Management

LIVE
Access Control Procedures
Completed
Alerts and Remediation
Completed
Board Charter
Completed
Board Meeting Minutes
Completed
Showing 6 of 8 control categories

Subprocessors directory

We carefully select and monitor all third-party services that process data on our behalf.

Twilio logo

Twilio

Business Apps & Productivity

AWS logo

AWS

Cloud Infrastructure & Platform Services

Anthropic logo

Anthropic

AI & ML Services

Auth0 logo

Auth0

Identity & Access Management

Linear logo

Linear

Business Apps & Productivity

Google Workspace logo

Google Workspace

Business Apps & Productivity

Showing 6 of 7 subprocessors

Frequently Asked Questions

Find answers to common questions about our security and compliance practices.

Our Security Commitment

Security Shield

At GhostEye, security isn't just a feature—it's foundational to everything we build. Our security-first mindset drives our development processes, infrastructure decisions, and organizational policies. We treat the data entrusted to us—whether from our customers, their end users, or anyone who interacts with our organization—with the utmost care and responsibility. Security is embedded in our DNA, enabling us to deliver innovative solutions without compromising on protection.

Monitored byDelve Logo
Security Shield