Security

Learn about the security features of Slant.

The security of your data is a top priority. We understand the sensitive nature of the information you entrust to us and are committed to maintaining a secure platform.

This document outlines the multi-layered security measures we have in place, from the handling of your data to the protection of our systems.

Understanding our security approach

Slant’s security philosophy is built on a foundation of industry best practices, robust technologies, and a proactive approach to identifying and mitigating risks. We continuously evaluate and enhance our security posture to address evolving threats.

Key security features

AI security & PII protection

We leverage Artificial Intelligence to enhance our services, doing so responsibly with a strong focus on protecting Personally Identifiable Information (PII).

Intelligent PII detection & handling

• Automated detection: Our proprietary technology automatically scans text to identify PII using patterns, entity lists, and machine learning models.
• Redaction: Sensitive data is irreversibly replaced with redaction characters (e.g., █) before it is sent to the LLM model.
• Pseudonymization: Data is tokenized (e.g., NAME:aBcDeFg123) for AI processing. Original data is accessible only under audited, controlled conditions.

Obfuscation of sensitive vault data

• Partial display (e.g., last four digits of SSNs) is used to minimize exposure of highly sensitive data.

PII proxy for added protection

• A PiiProxy mechanism automatically redacts or pseudonymizes data before it is accessed or displayed in the application.

Data encryption

Slant protects data at rest and in transit using strong encryption.

Encryption at rest

• Sensitive database contents are encrypted, including:
  • Original unmasked PII.
  • Vault-stored items like SSNs and financial data
  • Sensitive uploaded files
  • Life event dates
• Technology: Rails’ Active Record encryption.

Encryption in transit

• HTTPS/TLS everywhere: All platform communication is encrypted via TLS.

Secure credentials management

• Configuration credentials are encrypted using Rails’ encrypted credentials system.

Application and infrastructure security

Authentication

• Clerk is used for secure user identity management.
• OAuth 2.0 is used for safe third-party integrations.

Authorization & access control

• Pundit for enforcing access policies.
• Custom permissions system for role- and resource-specific access control.

Webhook security

• HMAC-SHA256 signature verification to validate incoming data.

Secure development & operational practices

• Sidekiq dashboard: Basic Auth secured.
• Host authorization: DNS rebinding protection.
• Log filtering: Sensitive values excluded from logs.
• Timing attack protection: Constant-time comparisons for cryptographic checks.

SOC 2 compliance

Slant is committed to meeting high standards for security and data protection. Our platform is built to align with SOC 2 trust service criteria.

SOC 2 Status

For current SOC 2 status, visit our Trust Center

Our ongoing commitment

Security is not a one-time setup; it’s an ongoing commitment. Slant continually monitors, evaluates, and improves our security to stay ahead of evolving threats.

For questions or to report a vulnerability, please contact our support team at [e-mail].