Security
Last updated: January 2026
Our approach
Security is built into every layer of our platform. Each secure server, portal, and threat sensor is built on an assessed NIST SP 800-53 control baseline, with isolation enforced in hardware and continuous verification. See Solutions for how each layer is constructed.
Compliance and certifications
ServLogi maintains active authorizations and certifications for FedRAMP High, NIST SP 800-53, DoD SRG IL5 and IL6, FIPS 140-3, HIPAA and HITECH, SEC Rule 17a-4, SOC 2 Type II, ITAR, CJIS, IRAP, and CMMC Level 3. A complete list with descriptions is available on our Company page. Comprehensive third-party audit reports, SOC 2 Type II certifications, CMMC compliance documentation, and detailed System Security Plans are available exclusively to verified agencies and defense contractors under a mutual Non-Disclosure Agreement.
Vulnerability disclosure
If you believe you have identified a security vulnerability in ServLogi infrastructure, please report it to our security team before disclosing it publicly. We investigate every credible report and will acknowledge receipt within two business days.
- Email findings to federal@servlogi.com with reproduction steps.
- Do not access, modify, or remove customer data beyond what is necessary to demonstrate the issue.
- Allow us reasonable time to resolve the issue before any public disclosure.
Data protection
Memory on every secure server is encrypted by the processor (AES-XTS) using temporary keys controlled by the customer. Agency Web Portals maintain cryptographically sealed, tamper-proof audit records.
Physical security
All hardware is housed in biometrically controlled enclosures across our data centers, with around-the-clock monitoring and restricted physical access. See Infrastructure for region-level detail.
Incident response
Continuous monitoring, distributed decoy systems, and machine learning threat detection are overseen by our security operations center, with direct escalation to affected customers' security teams.
Contact our security team
For security-related inquiries, reach us at federal@servlogi.com or call our direct integration line at (925) 290-8130, available 24/7.
Contact our security team
Vulnerability reports go directly to our security team. For other inquiries, the resources below will provide a faster response.
Report a vulnerability
Submit findings to our security team using the process described above. Our policy defines its scope and our expected response times.
Check platform status and audits
Our Trust Center provides live platform status, control coverage, and audit summaries.
Review the control baseline
The fourteen frameworks we maintain and the NIST SP 800-53 Rev. 5 controls our platform provides on your behalf.