generated: '2026-07-19'
method: searched
source: https://www.evercontact.com/security.html
standards:
- id: soc2-type2
  conforms: true
  evidence: >-
    Security page states Evercontact is independently audited to SOC 2 Type II for
    security, availability, and confidentiality with annual reviews.
- id: google-casa-tier2
  conforms: true
  evidence: >-
    Google Cloud Application Security Assessment (CASA) Tier 2, validating Google
    Workspace data handling and OAuth scope management.
- id: gdpr
  conforms: true
  evidence: EU data protection compliance with data-residency options.
- id: oauth2
  conforms: true
  evidence: Mailbox access via OAuth consent for Google Workspace and Microsoft 365.
- id: rfc9457-problem-details
  conforms: false
  evidence: No application/problem+json error contract published.
- id: tls13
  conforms: true
  evidence: TLS 1.3 in transit with HSTS enforcement (per security page); probe confirmed TLSv1.3.
encryption:
  in_transit: TLS 1.3
  at_rest: AES-256
data_commitments:
- No model training on customer email
- No data resale / no data-broker business
- Per-tenant logical isolation, least-privilege access
- Immutable exportable audit logs, configurable 7-year retention