MainStem helps companies manage their supply chain in a secure, compliant platform and improve their posture with customers, prospects, and partners.
MainStem takes data security seriously. We encrypt data at rest and in transit for all of our customers.
We use a variety of third-party tools, auditors, and services to provide best-in-class security for our entire user base on the MainStem platform.
In 2022, MainStem successfully completed a SOC 2 Type 2 audit conducted by Prescient Assurance, reaffirming our commitment to the highest standards of data security and privacy.
SOC 2 compliance goes beyond financial reporting, focusing on critical trust service principles such as security, availability, processing integrity, confidentiality, and privacy.
View the SOC 2 Type 2 report or view the letter of attestation.
MainStem regularly engages some of the industry's best application security experts for third-party penetration tests. Our penetration testers evaluate the source code, running application, and deployed environment.
MainStem also uses high-quality static analysis tooling provided by GitHub Advanced Security, such as CodeQL, Secrets Scanner, and Dependabot, to secure our product at every step of the development process.