Security & Compliance
Security isn’t just a feature. It’s the foundation of everything we do.
At Xtraleap, it’s built into the core of our company—our values, our technology, our vision.
With Xtraleap, you can secure your data, understand it, and govern it with confidence.
Because your data matters. And protecting it is our responsibility. Always.
Secure Sign on
We support Okta, Auth0, Google, Microsoft, and more to configure single sign-on. We also support local authentication with two factor authentication.
Encryption
Data is encrypted both in transit and at rest. xtraleap web application uses SSL, HSTS to encrypt all communication.




Environment
DigitalOcean is by default used to host Xtraleap's multi-tenancy model. For customers that require Business Critical, Business Critical Plus services, Xtraleap can be hosted by Amazon Web Services, Microsoft Azure, or their preferred cloud service provider. This will allow them to meet their privacy.
Transparency &
Audit-ability
With full control and detailed logging, you have full control over how and by whom data is handled.