Security that meets your standards
SOC 2 type II certified
Google Cloud hosted
GDPR compliant
Independently audited for SOC 2 Type II, built on Google Cloud, and shared on your terms.
Sign-in required
Viewers sign in with SAML SSO, Google, Microsoft, or a magic link.
Secure embed
Only viewable from a private host page on domains you approve.
Domain verified access
Only people with an email on your company’s domains get in.
Viewer logs
See who’s viewed your published sites.
Logged access
Open to anyone with a verified email.
Plain password
Password required to view.
Sign in once, stay in sync
Employees, agencies, partners, and press all need access to your brand guidelines. Standards lets you set the right level of access, then see who’s been viewing.
Built on Google Cloud, encrypted end to end, and stored entirely in the United States
Google Cloud, holds ISO 27001, SOC 2, and other certifications.
Read documentation
Encrypted data
Your files and content are encrypted with AES-256, and every connection is secured with TLS 1.2 or higher.
Custom domains
Publish on your own domain, with SSL certificates we issue and renew for you.
Abuse protection
Rate limits on sensitive endpoints and IP reputation checks at sign-up keep bad actors out.
Edge network
Traffic is served through Google and Cloudflare’s global networks.
We use AI for safety checks, translation, and in-app help. Your content never trains a model
Mistakes happen. Standards keeps
your work safe so you can undo them
Daily backups
We back up your data automatically, every day.
Version history
Browse past versions of any guideline and restore one in a click.
Recovery Time Objective (RTO)
48 hours, tested annually
Recovery Point Objective (RPO)
24 hours
Your legal team can see exactly how your data is handled, and who handles it.
Privacy policy
Found something?
Tell us
We won’t take action against research done in good faith. If you think you’ve found a security issue in Standards, email [email protected]. We’ll confirm we got your report and keep you updated while we fix it.
Answers for your security team
Our trust center has the documents most security reviews start with. Enterprise customers get the full report and a direct line to our team
Evaluating Standards for your organization? Request a quote and we’ll share our SOC 2 report and work through your security review with you.
Request a quote
Frequently asked questions
Where is our data stored?
On Google Cloud in the United States (us-central1).
Is our data encrypted?
Yes. Everything is encrypted at rest with AES-256 and in transit with TLS 1.2+
Do you train AI on our content?
No. We don’t use your content to train AI models, and neither do our AI providers.
Can we require SSO?
Yes. Your team can sign in through any SAML 2.0 identity provider on our Enterprise plan. You can also require viewers to sign in with SSO, Google, Microsoft, or a magic link before they see a published site.
Do you support SCIM?
Yes. Add and remove people automatically from your identity provider.
Is Standards SOC 2 compliant?
Yes. We completed our SOC 2 Type II audit in October 2026. Enterprise customers can request the report under NDA.
Can you fill out our security questionnaire?
Yes. Custom questionnaires and security reviews are part of Enterprise.
How quickly will you tell us about a breach?
We’ll notify affected customers within 72 hours hours of confirming a breach.
Will you sign a DPA?
Yes. Our DPA covers GDPR and includes Standard Contractual Clauses.
How do we report a vulnerability?
Email [email protected]. Our disclosure policy explains what happens next.