Security & Trust
How we protect your data
Boom Interactive builds software for facilities management, real estate and investor relations. Security is built into how we architect, host and operate CoreSpec 3D, not bolted on afterward.
Compliance status
We operate a formal ISO/IEC 27001-aligned information security management system, implemented and operating today. SOC 2 is planned on the same control set.
- ISO 27001 — ISMS implemented, certification not yet issued
- SOC 2 — planned
- GDPR — aligned, with a Data Processing Addendum and Standard Contractual Clauses available
How we protect your data
- Encryption everywhere — TLS 1.2 or better in transit, AES-256 at rest.
- Least-privilege access — role-based controls with multi-factor authentication enforced on every administrative account.
- Tenant isolation — customer data is logically segregated at the application and database layer.
- US data residency — hosted in the United States, with Standard Contractual Clauses for customers in the EU and UK.
- Backups and recovery — automated backups with a tested restore process.
- Incident response — a documented plan with prompt customer notification.
- Secure development — peer-reviewed changes, separated environments and automated dependency scanning.
Infrastructure and sub-processors
CoreSpec 3D runs on a major cloud provider that maintains its own SOC 2 and ISO 27001 certifications, in United States regions. We keep the number of sub-processors deliberately small and review each one.
Our current sub-processors are listed on the sub-processors page and in our Data Processing Addendum. Architectural detail, including the specific services and regions in use, is shared with customers and prospects under NDA rather than published here.
Request documentation
Our security questionnaire response, policy summaries, penetration testing position and full architecture detail are available to customers and prospects on request. Get in touch and we will send them.
This page describes controls in place and in active implementation under our ISO 27001 program. Boom Interactive does not represent that it holds certifications which have not been issued. Last reviewed September 2026.