Security & Compliance
Built to Protect Utility Data
SOC 2 TYPE II COMPLIANT
Independent auditors confirm our security controls operate effectively over time.

How We Protect Your Data
Auditable by Design
Every result traces back to its data sources, model versions, assumptions, and calculation logic, all documented and version-controlled. Our open methods provide traceability and auditability for every number.
Customer Data Privacy
We use customer data only to deliver contracted services and never sell it. Established processes govern how we handle PII and interval data, in line with each customer's data agreements. Read our privacy policy.
Data Protection
Data is encrypted in transit and at rest and hosted with least-privilege access. Data transfers use secure API access or SFTP with SSH key authentication.
Access Control
Two-factor authentication and role-based permissions protect every account, and customer admins control who on their team has access. Recurve staff access is limited by project role and need.
Security Operations
Regular testing, monitoring, and documented incident response plans protect the platform.