Skykit Trust Center: GettyImages 1193505273

Security. Compliance. Privacy. Reliability.

Skykit Trust Center

Explore how Skykit protects your data with enterprise-grade security, industry certifications, and transparent operational practices—all built to keep your organization safe, secure, and informed.

Quick Access:

Security

Enterprise-grade protocols

Compliance

SOC 2, NIST

Privacy

Data controls, role-based access

Reliability

4-hour RTO, 1-hour RPO

Controls

Infrastructure Security

Organizational Security

Product Security

Infrastructure Security

Data and Privacy

Compliance

Soc-2

SOC 2

Aligned with SOC 2 framework

Skykit Trust Center: framework informational page hero badges nist csf copy

NIST Framework

Security controls based on NIST standards

Skykit Trust Center: google cloud icon 2048x1646

Google Cloud Platform

ISO 27001, ISO 27018 certified hosting provider

Subprocessors

Skykit Trust Center: Google Cloud logo.svg

Cloud Provider

Skykit Trust Center: codeship.ec974f12f1a2c13fdec365f9d5821d11a44c6669

Continuous integration

Skykit Trust Center: 68747470733a2f2f7261772e6769746875622e636f6d2f6d61696c67756e2f6d656469612f6d61737465722f4d61696c67756e5f5072696d6172792e706e67

Email service

Zendesk Logo

Customer support

Skykit Trust Center: Twilio logo red.svg

Communications management

Skykit Trust Center: Github logo

Version Control

Skykit Trust Center: Netspi

Cloud monitoring and security assessment

Skykit Trust Center

Resources

Policies

Audit Reports

Misc

Skykit Trust Center

FAQ

Where does Skykit store my data?

Skykit stores your data primarily on Google Cloud Platform (GCP), with redundancy across various US regions. Backups are performed at least daily and stored on Google Cloud Storage fixed media. Approved storage locations for confidential data include Skykit laptops, Google Drive, Zendesk, and GitHub.

Skykit protects your data through multiple security measures:

  • Data separation through logical tenant isolation

  • Encryption in transit (TLS/HTTPS) and at rest (AES-256)

  • Strict role-based access control

  • Multi-factor authentication for sensitive systems

  • DDoS protection via Google Cloud Armor

  • Web Application Firewalls in blocking mode

  • Static and dynamic security testing for applications

  • Comprehensive logging and monitoring

  • Google’s robust physical security at data centers

The documentation does not explicitly state that Skykit sells customer data. Data collection of sensitive data is based on contractual agreements with clients, and appropriate data reviews are performed to ensure only agreed-upon data is collected.

  • Content, Programs, and Playlists: Retained until explicitly deleted

  • Email (terminated employees): 30 days

  • Audit logs: 90 days, then archived for one year

  • Temporary storage of confidential data: Removed after 90 days of non-use

  • Extracts of covered information: Verified every 90 days for continued necessity

How can I request data deletion?

For data deletion requests, contact Skykit support directly at support@skykit.com or via phone. Data subject requests may be reviewed by legal counsel before processing.

For data deletion requests, contact Skykit support directly at support@skykit.com or via phone. Data subject requests may be reviewed by legal counsel before processing.