Built to pass your review
The unglamorous parts done properly: encryption, access control, data handling, and a self-host option that means your data can simply never leave.
SOC 2 Type II program
Audit underway with a published timeline; the report goes to customers under NDA the day we have it. Controls are designed against the framework now, not retrofitted later.
Encryption everywhere
TLS 1.2+ in transit, AES-256 at rest, secrets in a dedicated KMS-backed vault. Connection credentials are encrypted per workspace and never appear in logs.
SSO, SCIM, and roles
SAML and OIDC single sign-on, SCIM provisioning, and role-based access down to individual flows and connections. Approvals leave an immutable audit trail.
Your data, your rules
Run payloads are retained on a schedule you set, including zero-retention mode. Data residency options in the EU and US. Deletion is deletion.
Self-host the whole engine
Static Go binaries with Docker images and a compose file, plus offline-signed license keys for air-gapped installs. Same engine as our cloud, inside your network, under your compliance regime.
Reliability you can hold us to
99.9% uptime SLA on Enterprise, status page with real history, and incident postmortems written like we read them: plainly.
The questions reviews ask
Where does GoRunner Cloud run?
On major cloud infrastructure in the EU and US, with region pinning on Enterprise. Self-hosted deployments run wherever you do, including air-gapped networks.
What does GoRunner see when we self-host?
License validation pings and, if you opt in, anonymous usage metrics. Your flows, payloads, and credentials never leave your network.
How do AI features handle our data?
GoRunner AI processes flow descriptions and, for AI steps, the payloads you route through them. Enterprise can pin AI processing to region, bring its own model keys, or disable AI features entirely per workspace.
Can you fill in our security questionnaire?
Yes. Standard questionnaires (CAIQ, SIG Lite) usually turn around within a week, alongside our DPA and subprocessor list.
Bring your hardest questionnaire.
Security reviews answered by people who built the controls, not a PDF generator.
Free plan · 1,000 runs a month · self-host or cloud