Trust & Compliance

Security you can
build on.

Level is built on infrastructure certified to the highest security standards — so the intelligence you run your company on is protected by enterprise-grade controls from day one.

SOC 2 Type IIISO 27001GDPRAES-256 EncryptionPenetration Tested

Compliance & Certifications

Infrastructure held to the
highest standards.

SOC 2 Type II

The infrastructure Level is built on is SOC 2 Type II certified, confirmed by independent audit of security, availability, and confidentiality controls.

Report available under NDA

ISO 27001

Level runs on infrastructure certified to the ISO 27001 information security management standard, with established policies and controls reviewed annually.

Certification available

GDPR

The platform is GDPR compliant, with a Data Processing Agreement available to support your compliance obligations for EU and UK data.

DPA available on request

Data Protection

Your data, protected end to end.

Encryption at rest and in transit

All data is encrypted with AES-256 both at rest and in transit, so your information is protected across its full lifecycle.

Data residency

Data is stored in the United States by default. EU and UK data-residency clusters are available on higher tiers, subject to availability.

Subprocessor transparency

A directory of subprocessors is maintained and available, so you always know which services touch your data.

Platform Security

Hardened infrastructure, continuously tested.

Penetration testing

Infrastructure undergoes regular internal and third-party penetration testing to identify and resolve vulnerabilities before they can be exploited.

Built-in security scans

Every app benefits from built-in security scanning with AI-powered fixes, catching misconfigurations as you build.

Managed infrastructure

Infrastructure, patching, and access controls are managed by Base44, so you inherit enterprise-grade protections without operating them yourself.

How your data is handled

Honest about access.
Committed to your privacy.

Your data is never used to train AI models. Your intelligence is yours.

Access is role-scoped and audited, with principle-of-least-privilege applied across the platform.

Need the SOC 2 report
for your security review?

The full report is shared under an NDA. Reach out and our team will get it to you quickly.

© 2026 Level. All rights reserved.