How we protect portal data

A plain-language view of how 1111 Studios hosts and protects the portal today.

Our current certification status 1111 Studios does not have its own SOC 2 report today. The infrastructure certifications below belong to Render.

Hosting

We host the portal on Render infrastructure that is SOC 2 Type II and ISO 27001 certified. Those certifications apply to Render's hosting platform, not to 1111 Studios.

Shop isolation and access

This is a multi-tenant application. Each shop is isolated by organization through enforced tenant boundaries, and each person uses an individual login. Founder accounts require two-factor verification after the password. Staff can opt in, while customer accounts are never forced to use it. Codes can arrive by account email or, when SMS is configured, text message; an authenticator app is an optional alternative.

Encryption and browser controls

HTTPS encrypts data in transit. Portal responses carry an enforcing Content Security Policy that limits the sources browsers may load.

Sensitive links

Capability-link tokens are moved out of the address bar after landing and redacted from access logs.

Where we're going

We're building toward our own SOC 2 Type II report. That 1111 Studios report is not available yet.