Security you can trust

The security of your data and the content of your presentations is a top priority at Pitch.

compliance

Compliant by design

Pitch meets the privacy and security standards your legal and IT teams expect, so you can share your work with confidence.

GDPR & CCPA

Pitch is fully compliant with both the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

GDPR & CCPA

Pitch is fully compliant with both the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

GDPR & CCPA

Pitch is fully compliant with both the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

Product illustration

SOC 2

Out dedication to security, privacy, confidentiality, and availability are attested in our SOC 2 Type I report.

SOC 2

Out dedication to security, privacy, confidentiality, and availability are attested in our SOC 2 Type I report.

Product illustration

SOC 2

Out dedication to security, privacy, confidentiality, and availability are attested in our SOC 2 Type I report.

Our documents

You can request security and compliance documents by e-mailing us at sales@pitch.io.

Our documents

You can request security and compliance documents by e-mailing us at sales@pitch.io.

Our documents

You can request security and compliance documents by e-mailing us at sales@pitch.io.

Product Security Features

How we keep you safe

Our information security program is designed to keep your data safe and our systems up and running to serve your needs.

  • Data encryption

    All data in transit and at rest uses modern robust encryption.

  • Network Security

    Pitch infrastructure is segregated and uses security groups, network firewalls, and web application firewalls to prevent common exploits.

  • Authentication

    Enterprise customers can leverage existing SSO solutions to use OAuth or SAML for user authentication and SCIM for user provisioning.

  • Secure SDLC

    Starting with security-focused design through code reviews, code scanning, and a robust test-suite, and finally ending with monitoring and on-call engineers, every step of the delivery and deployment of of software has security in mind.

  • Supply Chain Security

    Pitch uses software composition analysis to detect vulnerabilities in open source software, and package managers are configured to delay updating new releases to avoid common malware infection vectors.

  • Pentesting

    Our software undergoes pentesting from reputable pentesters at least once per year, and findings are addressed with expedience.

  • Vendor Review

    All critical vendors and those with access to user data undergo screening before integration, and they undergo yearly review.

  • Physical Security

    Pitch’s office is alarmed and monitored 24/7. Our infrastructure is hosted in AWS data centers that are guarded and alarmed.

Reporting Vulnerabilities

Please see our Security Vulnerability Disclosure Policy for the full details about how to report security findings. We take reports seriously to improve our product and to protect our users’ data, but we do not have a Bug Bounty program that rewards valid findings.

Pitch product visual