Trust Center
Security, privacy, and compliance at PetroBench
PetroBench is committed to protecting your data and maintaining the highest standards of security and privacy. This Trust Center provides transparency into our practices.
Security
Hosting, network, vulnerability and change management, logging
Data Protection
Encryption, key management, backups, retention, and data location
Authentication
SSO, MFA, SCIM, and access control
Compliance
Frameworks, assessments, and automated testing
Incident Response
How we handle security and availability incidents
Shared Responsibility
Your role and ours in security
Single Sign-On (SAML)
SAML 2.0 setup, enforcement, and supported identity providers
AI and MCP Controls
How AI and MCP access is enabled, scoped, and revoked
Service Level Agreement
Uptime, support, and maintenance windows
Our Commitments
| Area | Commitment |
|---|---|
| Hosting | AWS, US East (Ohio), across multiple availability zones, behind Cloudflare for DDoS protection, WAF, and TLS |
| Data Location | Customer data is stored and processed in the United States |
| Data Ownership | You retain full ownership of your well data |
| Data Sales | We never sell or monetize customer data |
| Encryption | AES-256 at rest, TLS 1.2+ in transit |
| Access Control | Role-based permissions with org hierarchy, SAML SSO, SCIM, and MFA |
| AI and MCP | Off by default and enabled per organization; customer data is not used to train AI models |
| Backups | Continuous backups with point-in-time restore, plus a nightly encrypted copy in a separate region |
| Availability | Uptime commitments vary by plan; live status at status.petrobench.com |
| Incident Notification | Customer notification within 72 hours of confirmed security incidents |
| Frameworks | Aligned with the NIST Cybersecurity Framework, OWASP Top 10, and ASVS |
Legal Documents
Terms of Service
Service agreement
Privacy Policy
Data collection and use
Cookie Policy
How we use cookies
Acceptable Use
Usage guidelines
Security FAQs
Common security questions
Status
Real-time platform status is available at:
status.petrobench.com
View current system status
Questions?
For security inquiries, contact legal@petrobench.com