Rulisto Trust Center

Inherited SOC 2 & ISO 27001

Under the Shared Responsibility Model, Rulisto's data layer and hosting infrastructure are built entirely upon SOC 2 Type II and ISO/IEC 27001 certified providers (Vercel & Supabase/AWS).

CSA STAR Level 1

Rulisto aligns with the Cloud Security Alliance (CSA) best practices. We utilize the Consensus Assessments Initiative Questionnaire (CAIQ) framework to transparently document our cloud security controls.

Automated Vulnerability Scanning

Our CI/CD pipelines enforce strict security gates on every deployment:

• SAST: GitHub CodeQL scans source code for injection flaws and logic vulnerabilities.
• DAST: OWASP ZAP actively probes the production environment.
• Supply Chain: Continuous audits prevent CVEs in third-party dependencies.

Data Residency & Encryption

All metadata is hosted in the US (AWS us-east-1). Data is strictly encrypted at rest using AES-256 and protected in transit utilizing TLS 1.3 cryptography.

Validates strict implementation of Content Security Policy (CSP), HTTP Strict Transport Security (HSTS), X-Frame-Options, and robust cross-site scripting protections.

Verifies the deployment of strong cryptographic ciphers (TLS 1.3), perfect forward secrecy, strict certificate chains, and vulnerability mitigations (e.g., Heartbleed).

Continuous monitoring via VirusTotal and Google Safe Browsing ensures the platform domain remains strictly unflagged and free of malicious payloads or deceptive UI.

Rulisto is engineered for broad accessibility, adhering to WCAG 2.1 guidelines to ensure screen-reader compatibility and keyboard navigation across our enterprise dashboards.