generated: '2026-07-18'
method: searched
source: https://www.brellium.com/security
url: https://www.brellium.com/security
note: Brellium has no dedicated trust.brellium.com subdomain; its public Security & Compliance
  page functions as the trust/compliance surface and names the certifications verbatim.
certifications:
- SOC 2 Type I
- SOC 2 Type II
- HIPAA
auditors:
- Secureframe
- Johanson Group
security_posture:
  encryption_in_transit: HTTPS/TLS 1.2+
  encryption_at_rest: AES-256 (AWS S3, per-customer isolated buckets, Ohio datacenter)
  data_residency: USA only
  access_control: Role-based access via Okta/Auth0
  penetration_testing: annual (most recent 2025-03-02)
  baa: executed with every customer as standard
  cloud: AWS (primary), Azure (secondary)
evidence:
- source: https://www.brellium.com/security
  keywords:
  - soc 2 type ii
  - soc 2 type i
  - hipaa
  - secureframe
  - johanson group