Security for a workspace that can know a lot about you.
MySamantha can contain personal notes, email access, calendar information and other connected data. Security isn’t a secondary feature for a product like this.
Independent verification
We ask independent assessors to check our work, and we publish the results here.
CASA Tier 2 Certification
MySamantha is CASA Tier 2 certified, demonstrating adherence to Google’s Privacy, Data Security, Secure authentication, and Compliance requirements.
View Letter of Verification (LOV)Renewal is in progress and will be updated.
Regular Third-Party Security Audits
Frequent penetration tests and audits conducted by accredited security firms.
Continuous Compliance Validation
Real-time compliance monitoring to detect deviations and enforce standards across infrastructure.
Security controls
Authentication and access controls
Role-based access, enforced MFA, and background checks for all employees with data access.
Encryption
Data encrypted in transit (TLS 1.3) and at rest (AES-256).
Infrastructure monitoring
Real-time logging, anomaly detection, and 24/7 system monitoring.
Secure development
Secure code reviews, automated testing, and supply-chain dependency scanning.
Incident response
Documented procedures and rapid escalation with external audit traceability.
Security claims should be verifiable.
We publish details about our controls and provide a responsible disclosure process for security researchers. Security fixes are documented in our Changelog.