Pattern aligns its security program to recognized industry practices and frameworks, including NIST-based security practices, and maintains a formal information security program with documented policies and periodic reviews.

Yes. Pattern has completed a SOC 2 Type II audit, and customers may request additional trust documentation through the appropriate review process and, where required, under NDA.

Yes. Pattern encrypts customer data both at rest and in transit using industry-standard protections. The provided materials indicate that data at rest is encrypted using AES-256, including backups, and that data in transit is protected using TLS 1.2 or higher for external transmissions and integrations

Pattern describes using access controls, encryption, isolation mechanisms, and monitoring to help prevent unauthorized access between customers in shared environments

Yes. Pattern states that it has data retention and data destruction policies in place