Transparent business model
You’re not the product and neither are your users. You always know where your data is and what it is processed for.
Your users stay your users
Our services don’t track your users. User identity stays under your control.
Security & Privacy by design
We consider security and privacy from the initial design phase of any new service or functionality. It’s not an afterthought, it’s built-in.
Robust Compliance Program
BSI C5
HIPAA
GDPR
CCPA
Our Security Measures
Data
- Highly-available multi-datacenter architecture
- API keys designed for browser as well as backend usage
- Secure multi-tenant architecture preventing leakage of data between our customers
- Monitoring API for access to transparent state of your service
- SAML 2.0 login available to integrate with your IdP
- Encryption at rest available for additional protection
- Regularly updated Algolia security best practices
Privacy
- No built-in tracking of your users, no cookies, no fingerprints
- API keys designed for browser as well as backend usage
- TRUSTe Certified Privacy
- Transparent Privacy Policy
- All our services are GDPR compliant
- All our services are CCPA compliant
- Transparent cookies usage
- Standard Contractual Clauses
Compliance
- Annual SOC 2 audit
- HIPAA-compliant environment
- All employees trained for security during onboarding and annually refreshed
- Publicly available Cloud Security Alliance CAIQ
- Semi-annual independent penetration testing of our services
Additional Security & Infrastructure Resources
