Security and Privacy @ Variance

All of your sensitive data is kept secure and private, so you can focus on what matters—selling & growing your business.

Security First

We have built the Variance platform from the ground-up with security in mind.

Isolated database & pipeline

Every Variance customer has their own pipeline and database. This isolation is a critical part of our architectural philosophy.

Encryption in transit & rest

All data is encrypted in transit via TLS 1.2 and at rest with AES-256 encryption.

SOC 2 Type II Compliance

Established mitigation of risks related to security, availability, and confidentiality.

GDPR Compliance

Variance adheres to the EU’s GDPR legislation on storage and deletion of user data.

Variance Architectural Principles

We have approached building a secure product from the ground-up.

Real-Time

We orient all our architecture around being able to securely process data in real-time. All our systems are built to scale as our customers' businesses scale.

Simple

We believe in the best way to architect a robust system is to use fewer, simpler components. This reduces architectural complexity as well as the security threat area.

Isolated

All data and data pipelines are isolated between tenants. This is a drastic step and different than the way most other vendors approach the problem, but we believe the best way to ensure security is to architect it.

Legal and Security

Send your legal team here to see all of our legal agreements.

SLA

The Variance Service Level Agreement (SLA)

GDPR

As a Processor for your user data, Variance is committed to making it easier for you to comply and equipping you, our customers, with more accessible paths towards your compliance with applicable laws and regulations.

Data Processing Agreement

This Data Processing Agreement sets out the requirements for Variance’s processing of Personal Data on behalf of Customer for the purposes of providing the Services.

Terms and Conditions

Please read these terms and conditions (“terms”) carefully before using the services offered by variance, inc. (“variance”).

Vulnerability Disclosure Policy

This policy outlines steps for reporting vulnerabilities to us, what we expect, what you can expect from us.

Mutual NDA

Our Mutual Nondisclosure Agreement.

Subprocessors

To support delivery of our Services, Variance, Inc. may engage and use data processors with access to certain Customer Data (each, a "Subprocessor"). This page provides important information about the identity, location and role of each Subprocessor.

Welcome to the Variance, Inc. website. Please read on to learn the rules and restrictions that govern your use of our website (the “Website”).

Please read this Privacy Policy to learn how we treat your personal data.

Data security and privacy

All of your sensitive data is kept secure and private, so you can focus on what matters—selling & growing your business.

Security First

Variance Architectural Principles

Real-Time

Simple

Isolated

Legal and Security

The System for Growth

Resources

Company

Integrations

Follow Us