ArcGlass is committed to protecting the privacy and security of information processed through its Services. Our Privacy Policy explains how ArcGlass collects, uses, protects, retains, and discloses personal information and Customer Content.

ArcGlass maintains processes for identifying, responding to, and managing security incidents. In the event of a confirmed security incident affecting Customer Content, ArcGlass will provide notifications in accordance with applicable law and the terms of the applicable customer agreement.

ArcGlass provides security and privacy awareness training to personnel. Training covers areas such as information security, data protection, phishing and social engineering, password security, access control, acceptable use, and incident reporting.

ArcGlass applies technical and organizational safeguards designed to protect Customer Content. Data is encrypted in transit and at rest, and ArcGlass maintains controls including authentication, access controls, logical tenant isolation, and restricted access to customer information.

ArcGlass's security program is designed to protect the confidentiality, integrity, and availability of customer information.

ArcGlass processes information provided through customer-authorized sources, which may include meetings, emails, messages, calls, support systems, and other connected business applications.

Customer Content remains owned and controlled by the customer. ArcGlass processes Customer Content to provide, secure, and support its Services in accordance with applicable agreements.

A high level network diagram is available in our SOC 2 report.

Pentest Report for 2026

Access to ArcGlass systems and customer information is restricted to authorized personnel based on business need and appropriate access controls. Access to customer information is limited to the minimum necessary to provide and support the Services and is subject to appropriate security safeguards.

ArcGlass uses authentication and access control mechanisms to help ensure that only authorized users can access the platform and associated resources. Access permissions are managed according to assigned roles and business requirements.

ArcGlass applies authentication and password security practices designed to protect user accounts and internal systems from unauthorized access. Users are expected to maintain the confidentiality of their authentication credentials and follow applicable security requirements.

ArcGlass maintains an inventory of organizational endpoints and devices through Andromeda Shield. Asset information is centrally collected and monitored to provide visibility into devices connected to the ArcGlass environment and support effective security and compliance management.

Andromeda Shield provides continuous visibility into ArcGlass endpoints and their security status. Endpoint information is monitored to help identify security issues, configuration changes, and potential risks affecting organizational assets.

ArcGlass's application infrastructure is hosted across authorized cloud service providers, including Google Cloud Platform (GCP) and Render. Cloud resources are managed according to ArcGlass's security and access control requirements and are monitored as part of the organization's overall infrastructure security program.