Matik Trust Center

generated: '2026-07-20'
method: searched
probe: true
source: https://www.matik.io/security
url: https://www.matik.io/security
certifications:
- SOC 2 Type I
- SOC 2 Type II
- GDPR
practices:
- AES-256 encryption at rest
- AWS infrastructure with CloudTrail logging and WAF
- Role-based access control (RBAC)
- Enforced two-factor authentication
- 72-hour breach notification
- Daily database backups retained 30 days
contact: hello@matik.io
vulnerability_disclosure:
  published: false
  note: >-
    Re-probed 2026-08-14: https://www.matik.io/security returns 200 (~20k chars) and
    contains no "disclosure", "vulnerability", "bug bounty", "security@", "penetration"
    or "report a". No /.well-known/security.txt on any Matik-controlled host, and no
    HackerOne/Bugcrowd/Intigriti program. There is no published route to report a
    vulnerability — only hello@matik.io as a general contact.
evidence:
- source: https://www.matik.io/security
  keywords:
  - soc 2
  - soc2
  - gdpr
x-recheck: '2026-08-14'
x-recheck-note: >-
  Content re-verified 2026-08-14; certifications and practices unchanged. The mechanical
  probe would have flattened "SOC 2 Type I"/"SOC 2 Type II" to "SOC 2" and dropped the
  practices list and contact, so its weaker output was discarded per the pipeline's
  never-downgrade rule.