Quarter Circle
Circle
Circle

zeroheight / Security

Pass the security review. Control who sees what

zeroheight is SOC 2 Type II and ISO 27001 certified and GDPR compliant. SSO, roles, and private styleguides put you in charge of who gets in.

Explore our Trust Center
Zh Icon 013 Lock

Secure by default

Data is encrypted at rest and in transit, hosted in the EU, and tested by independent firms every year.

Zh Icon 002 Users

Control access

SSO for sign-in, roles for permissions, and access rules for every styleguide.

Zh Icon 182 Checklist

Procurement-ready

Reports, policies, pen tests and a completed VSA questionnaire are ready before your security team asks.

Security and compliance

Every document your security team will ask for. Independent audits, encrypted EU hosting and regular third-party testing.
Zh Icon 203 Medal

SOC 2 and ISO 27001, independently audited



Re-audited every year, and we're GDPR compliant too.

Zh Icon 013 Lock

Your data, encrypted and hosted in the EU



Hosted on AWS in Ireland, with tested failover in Germany. AES-256 encryption at rest, TLS 1.2+ in transit.

Zh Icon 104 Robot Neutral

AI you can switch off at any time



Nothing goes to an AI provider unless you opt in. If you do, your content isn't used to train models.

Zh Icon 017 Shield Alert

Pen tested by people paid to break in



Independent firms test us every year. We check new industry threats as they emerge, and share the results.

Audit reports, pen tests and security policies are all in the Trust Center, so your review doesn't stall waiting on us.

security logos

Square Shape

Control Access

SSO, roles and styleguide-level permissions that put you in charge of who sees and edits what.

  • SSO with the identity provider you already use

    Works with any SAML 2.0 provider, including Okta, Azure and Google Workspace. Put editors, reviewers and viewers behind it.

  • Access that fits each role

    Give everyone the right level of access, from the team building your design system to the people who just need to read it.

  • Decide what’s public and what stays private

    Set styleguides to public, password-protected or SSO-only. Private viewers let you share with people outside your company.

Background Shape

FAQs

  • Is zeroheight a high-risk vendor?

    It’s generally considered low risk. Design system docs are mostly internal or already public, so there’s little sensitive data involved. Plus, you control exactly who can see them through SSO, roles, and access settings.

  • Which plans include SSO?
  • Where is my data stored?
  • Can I see who changed what?
  • Where can I get your SOC 2 report and policies?