Security at Yarno
Yarno is built with enterprise-grade security at every layer, from encryption and Australian hosting to independently audited SOC 2 Type 2 controls.
FAQs
Can you complete our security questionnaire?
Yes. We complete security questionnaires and vendor assessments regularly. Send yours to security@yarno.com.au. This page and our SOC 2 report often answer most of it.
How do I get your SOC 2 report?
Email security@yarno.com.au. We share the full report under NDA. Our latest penetration test summary is available the same way.
Where is our data stored?
All core platform data is stored in AWS data centres in Australia, with production in Sydney and backups in Sydney and Melbourne. A few supporting services, such as platform emails and support tickets, run overseas.
Do you hold ISO 27001?
Not currently. Our security program is independently audited every year against SOC 2 Type II, which covers many of the same controls.
What happens to our data if we leave?
You have a month after your contract ends to export anything you need, before we delete your data. You can export data yourself at any time as CSV or Excel.
How do I report a security vulnerability?
Email security@yarno.com.au with as much detail as you can. Please don't publicly disclose the issue until we've had a chance to fix it.
Where can I find your privacy policy and terms?
Read our Privacy Policy and Terms of Use.
Email security@yarno.com.au to learn more.