generated: '2026-07-18' method: searched source: https://www.goboon.co/security standards: - id: iso27001 conforms: true evidence: security page states data centers hold ISO 27001 certification - id: gdpr conforms: true evidence: security page documents GDPR principles (consent, purpose limitation, right to be forgotten) - id: oauth2 conforms: true evidence: security page documents OAuth2 support for Google Sign In with two-factor authentication - id: tls12-tls13 conforms: true evidence: TLS 1.2/1.3 for data in transit, AES-256 at rest (security page); TLSv1.3 confirmed by domain probe - id: soc2 conforms: false evidence: no SOC 2 attestation published on the security page