Nodety Security
Nodety is committed to protecting the security, integrity, and confidentiality of our customers' data. This page describes the technical and organisational security measures we maintain.
Infrastructure
Nodety's services are hosted on cloud infrastructure in European regions, with multi-region infrastructure and failover capabilities. Enterprise customers may purchase dedicated session workers or alternative Deployment Models as described in the Enterprise Addendum.
Encryption
In transit: All data transmitted between users and Nodety, and between internal services, is encrypted using industry-standard encryption protocols.
At rest: All data at rest on Nodety-managed infrastructure is encrypted using industry-standard encryption. For non-default Deployment Models, encryption at rest on Client Infrastructure is the User's responsibility as described in the Enterprise Addendum.
Access controls
- Role-based access controls enforce the principle of least privilege across all systems
- Multi-factor authentication is required for all Nodety personnel accessing production systems
- Administrative access to production infrastructure is logged
- Access is reviewed periodically and revoked promptly upon role changes or departure
Application security
- All changes to production code require peer review and approval before merging
- Automated dependency scanning (Dependabot, Renovate) monitors for known vulnerabilities in third-party packages
- Licence compliance checking ensures only approved open source licences (such as MIT) are used
- Automated test suites run in CI/CD pipelines before deployment to production
Network security
Production, staging, and development environments are segmented from one another, ensuring that non-production workloads cannot access production data or infrastructure.
Monitoring and incident response
Availability monitoring: System availability and performance are monitored continuously using BetterStack.
Error monitoring: Application errors are tracked and triaged using Sentry.
Incident response: Nodety maintains documented incident response procedures. In the event of a personal data breach, Nodety will notify affected customers without undue delay in accordance with our Data Processing Agreement.
Business continuity
For cloud-hosted customers, Nodety performs regular backups of customer data. For Enterprise Users on non-default Deployment Models, backups of data on Client Infrastructure are the User's responsibility (see the Enterprise Addendum); Nodety backs up operational data from Nodety-managed components. Multi-region infrastructure provides failover capabilities to maintain service availability in the event of a regional disruption.
Compliance
Nodety processes personal data in accordance with the UK GDPR, EU GDPR, and other applicable data protection laws. Relevant documentation:
Personnel security
All Nodety personnel with access to customer data or production systems are subject to confidentiality obligations.
Data handling
For detailed information about how Nodety collects, processes, and stores personal data, see our Privacy Policy. For data processing on behalf of customers, see our Data Processing Agreement. For Enterprise Users on non-default Deployment Models, data handling is described in the Enterprise Addendum.
Responsible disclosure
If you discover a security vulnerability in Nodety's services, please report it to info@nodety.com with the subject line "Security Vulnerability Report". We ask that you:
- Provide sufficient detail to reproduce the vulnerability
- Allow reasonable time for us to investigate and address the issue before public disclosure
- Do not access, modify, or delete other users' data
Enterprise security enquiries
Enterprise customers and prospects may submit security questionnaires to info@nodety.com. Nodety is not obligated to disclose source code, proprietary security architecture, or information that would compromise the security of the services.
Last updated: 12 October 2026