Privacy

Privacy & Data Protection Standards

Endpoint applies consistent privacy and data protection practices across our websites, platforms, and business operations. These standards are supported by formal policies, operational procedures, and governance oversight.

Privacy Practices

Endpoint's Privacy Policy explains how personal information is collected, used, shared, retained, and protected, as well as the rights available to individuals under applicable data protection laws.

Data Protection Controls

Endpoint maintains policies and procedures designed to support responsible data handling, including:

Data classification standards
Defined retention and deletion timelines
Secure disposal of electronic media
Customer data removal upon service termination

These controls help ensure data is handled in accordance with contractual, regulatory, and ethical expectations.

View Privacy Policy

SOC 2 Certification

Endpoint maintains a comprehensive, risk-based information security program designed to protect customer and personal data against unauthorized access, disclosure, alteration, or destruction.
Our security program incorporates administrative, technical, and physical safeguards aligned with recognized industry frameworks and best practices

Technical & Infrastructure Security

Endpoint implements layered security controls across its production environments, including:

Unique user authentication and role-based access controls
Restricted access to production systems, databases, networks, and operating systems
Encryption of sensitive data at rest and during transmission
Firewall protections and network segmentation
Secure configuration and deployment controls

Product & Application Security

Security is integrated throughout Endpoint's system development lifecycle, including:

Formalized development and change management procedures
Restricted production deployment access
Regular vulnerability scanning and penetration testing
Continuous monitoring for security events
Documented remediation and corrective action processes

These practices support the integrity, availability, and reliability of Endpoint platforms.

Organizational & Operational Security

Endpoint supports its technical controls with strong organizational governance, including:

Employee background checks and security awareness training
Confidentiality and code-of-conduct agreements for employees and contractors
Business continuity and disaster recovery planning, with routine testing
Cybersecurity insurance coverage

Security and privacy risks are reviewed at the leadership level as part of ongoing governance and oversight.

SOC 2 Certification

Endpoint maintains a robust security and privacy program, including SOC 2 Type ll certification aligned to the Security Trust Services Criteria.

Our Cybersecurity control environment includes:

Access control and identity management
Change, configuration, and release management
System monitoring and incident response
Data protection, retention, and disposal practices
Organizational oversight of cybersecurity and privacy risk

Endpoint undergoes regular independent assessments and internal controlevaluations to assess the design and operating effectiveness of these controls.Additional assurance materials may be made available under confidentiality agreements.

Want to Learn more:

We make it easy to review our security posture. Visit our Trust Center to request access, complete an NDA if needed, and download SOC 2 and other security documentation.

Access Trust Center

Built to Protect

Clinical Trial Data

Privacy & Data Protection Standards

SOC 2 Certification

SOC 2 Certification

Transparency & Customer Assurance

Join the Endpoint Newsletter