Skip to main content

​
SOC 2 Type 2 Certified

SOC 2 Certified Thoras is SOC 2 Type 2 certified, demonstrating our commitment to maintaining the highest standards of security, availability, and confidentiality. Our SOC 2 certification provides assurance that we have established appropriate controls and safeguards to protect your data and systems.

​
Self-Hosted. Your Data Stays With You

Thoras is a self-hosted solution, meaning all your data remains within your own cluster, never leaving your environment. This approach provides several key security benefits:

​
Complete Data Control

  • All metrics, recommendations, and operational data stays within your Kubernetes clusters
  • No data transmission to external third-party services
  • Full ownership and control over your sensitive information

​
Enhanced Security Posture

  • Nothing leaves your environment (unless you enable optional Cloud Sync)
  • Eliminates external data exposure risks
  • Maintains compliance with your organization’s data governance policies
  • Reduces attack surface by keeping data within your secured perimeter

​
Secure by Default

  • Internal API calls between Thoras components are authenticated with a shared bearer token.
  • The dashboard requires authentication out of the box, with single sign-on available through Okta, Azure Entra ID, or any OIDC-compliant identity provider.
  • Optional least-privilege network policies for every component

​
Regulatory Compliance

  • Helps meet strict data residency requirements
  • Supports GDPR, HIPAA, FedRAMP, and other regulatory compliance frameworks
  • Enables audit trails within your controlled environment

​
Questions About Security?

For specific security questions or to request additional compliance documentation, email support@thoras.ai.