Security & compliance, built in

Otper is built for the controls your security team will ask about — so it clears review before it lands in production, on every plan, not just Enterprise.

GDPR
SOC 2
ISO 27001
Encryption

Encryption in transit and at rest

All traffic is TLS-encrypted, and data is encrypted at rest. There is no plan tier where encryption is optional.

Passkey-based authentication

Phishing-resistant passkey sign-in and magic links, so credentials aren't the weakest link in your delivery stack.

Scoped session & token revocation

Sessions and API tokens are scoped and individually revocable — offboard a person or a machine integration in seconds.

Attributable audit trails

Every status change is attributable to a named owner in real time. As one customer put it: "the audit trail alone has paid for itself in security reviews."

Compliance-aligned data handling

GDPR-aligned data processing, retention, and deletion practices — documentation available for your review process.

Ready for your security review

SOC 2 and ISO 27001-aligned controls at self-serve pricing — not gated behind an Enterprise contract. Request documentation.

Bring a tool your security team will approve.

Start free, or talk to us about your compliance requirements.