Trust Center
Your data is never read.
Trailox reads the access logs and catalog metadata your data stores already keep. It never reads table rows, object contents or query results.
AICPA SOC 2 Type II, audited by Thoropass
Trailox processes over 100 billion S3 requests per month across customers.
What Trailox reads
| Data | Access |
|---|---|
| Access logs | Read |
| Catalog metadata | Read |
| Table rows | Never |
| Object contents | Never |
| Query results | Never |
Read-only. No write, delete or admin permission.
How we protect your data
Your data is never read
Trailox reads access logs and catalog metadata. Never table rows, object contents or query results.
Read-only
No write, delete or admin permission on any data store.
Agentless
No agent on your database servers, endpoints or applications.
Encrypted
Encrypted in transit and at rest.
SOC 2 Type II
Audited by Thoropass. We share the full report under NDA.
You stay in control
Stop collection from your side at any time. We delete collected metadata when the contract ends, or on request.
Security reviews
Running a vendor security review? Email support@trailox.io with your company name and your role. We send an NDA, then the full SOC 2 Type II report.
Report a vulnerability: support@trailox.io.
Privacy and data processing agreement (DPA) requests: privacy@trailox.io.
Machine-readable contact: security.txt.
Questions buyers ask
Does Trailox read my data?
No. Trailox reads the access logs and catalog metadata your data stores already keep. It never reads table rows, object contents or query results.
What does Trailox collect?
Access logs and catalog metadata, never your data. Talk to us during your security review about what is collected.
Is Trailox SOC 2 Type II?
Yes. Trailox has an AICPA SOC 2 Type II report, audited by Thoropass. Email support@trailox.io and we send an NDA, then the full report.
Start with a free
Data Access Review.
Read-only. First findings in 48 hours.