Export Control and Data Handling

This page explains how documents are handled by the platform and the responsibilities of users when uploading technical documents.

Enterprise-Grade Security Certifications

assistaNDT is built on Base44's secure cloud infrastructure. Base44 maintains SOC 2 Type II and ISO 27001 certifications, providing enterprise-grade controls for security, availability, and data protection.

SOC 2 Type II Certification

SOC 2 (Service Organization Control 2) Type II certification, maintained by Base44, demonstrates that the underlying infrastructure meets rigorous standards for security, availability, processing integrity, confidentiality, and privacy. This certification is audited by independent third parties and ensures that appropriate controls are in place to protect customer data.

ISO 27001 Certification

ISO 27001 is the international standard for information security management systems (ISMS). Base44's ISO 27001 certification validates that the infrastructure implements comprehensive security controls, risk management processes, and continuous improvement practices to protect sensitive information.

What this means for you: Your data is stored and processed using industry-leading security standards with encryption at rest and in transit, regular security audits, and comprehensive access controls.

These certifications relate to information security controls and do not by themselves determine regulatory or export-control compliance for user-provided content.

What This Means?

How Your Documents Move Through the Platform

Data Lifecycle Overview

To provide clarity and transparency, the following explains how documents are handled when uploaded and stored on the platform.

Document Storage Features (Intentional Retention)

In other areas of the platform, users may upload and store documents (such as personnel records or internal documents).

Step 1 – Upload

Documents are securely transmitted using encrypted connections.

Step 2 – Encrypted Storage

Documents are stored in encrypted cloud storage.

Step 3 – Access Control

Access is controlled by your organization's user permissions and account settings.

Step 4 – Retention

Documents remain stored until:

  • You delete them
  • Your organization removes them
  • Account termination triggers data removal per applicable retention policies

Stored documents are not accessed by company personnel except where required for system maintenance or legally required obligations.

Security Protections Applied to All Documents

All documents on the platform benefit from:

  • Encryption in transit and at rest
  • Strict access controls
  • Role-based permissions
  • Regular security audits
  • SOC 2 Type II and ISO 27001 certified infrastructure

Your Responsibility

You remain responsible for:

  • Determining whether uploaded documents are subject to export control laws
  • Controlling access within your organization

If you have questions about data security, certifications, or compliance obligations, please contact us:

info@assistandt.com