Security & Compliance

Built to Protect Utility Data

SOC 2 TYPE II COMPLIANT

Independent auditors confirm our security controls operate effectively over time.

How We Protect Your Data

Auditable by Design

Every result traces back to its data sources, model versions, assumptions, and calculation logic, all documented and version-controlled. Our open methods provide traceability and auditability for every number.

Customer Data Privacy

We use customer data only to deliver contracted services and never sell it. Established processes govern how we handle PII and interval data, in line with each customer's data agreements. Read our privacy policy.

Data Protection

Data is encrypted in transit and at rest and hosted with least-privilege access. Data transfers use secure API access or SFTP with SSH key authentication.

Access Control

Two-factor authentication and role-based permissions protect every account, and customer admins control who on their team has access. Recurve staff access is limited by project role and need.

Security Operations

Regular testing, monitoring, and documented incident response plans protect the platform.