Security & Compliance

Bank-Level Data Protection

All your data is protected using AES-256-GCM encryption—the same standard used by major financial institutions and government agencies. Whether your data is being stored or transmitted, it remains unreadable to anyone without authorization.

Strict Access Controls

We take a "when in doubt, deny access" approach to security. Our fail-closed validation system means that if there's ever any uncertainty about who's trying to access your data, the request is automatically blocked. Only verified users from your organization can see your information.

Complete Audit Trails

Every action in Caladan is logged. From who viewed a report to when data was exported, you'll have a comprehensive record of all activity. This makes compliance reporting straightforward and gives you full visibility into how your financial data is being used.

Thoroughly Tested Software

We maintain comprehensive automated testing across the entire platform. Every feature is verified before release to ensure your data is handled correctly and calculations are accurate. This rigorous testing process means you can trust the numbers you see.

SOC 2 Type II: Audit in Progress

Our SOC 2 Type II audit is actively underway, with continuous controls monitoring already in place across our infrastructure. The platform is architected to SOC 2 standards for security, availability, and confidentiality today. Upon certification, a summary report will be available to customers upon written request under a non-disclosure agreement.

Caladan is built for clinical trial financial data—budgets, contracts, invoices, and forecasts. The platform is not designed to store patient-level health information (PHI), which keeps your compliance surface small.