Certifications

• SOC 2 Type II — audit in progress, target completion 2026 H2
• ISO 27001 — gap assessment scheduled 2026 H2 (powered by our own Argitron)
• GDPR — DPA available on request, EU sub-processors disclosed below
• WCAG 2.1 AA — Studio accessibility validated

Status & uptime

Live status: status.deklarative.com. Cloud SLA: 99.9% on Cloud Starter and Growth, 99.95% on Enterprise. Self-hosted is what you operate it as.

Sub-processors

• AWS (US-East, EU-Frankfurt) — primary hosting
• Stripe — billing
• Sentry — error monitoring (PII-scrubbed)
• Customer.io — transactional email
• Cloudflare — DNS + DDoS

Self-hosted customers do not use any of the above.

Security disclosures

• Security overview
• security.txt + PGP
• Pen test reports — available under NDA, contact sales
• SBOM published per release
• Source escrow available on Enterprise