Every layer of Sidelight — infrastructure, database, delivery, and identity — runs on SOC 2–audited platforms. Built for financial services from day one.
Compute and storage run on AWS — SOC 2 and ISO 27001 audited infrastructure trusted by the world's largest financial institutions.
Your data lives in MongoDB Atlas with encryption at rest and in transit, automated backups, and SOC 2 Type II attestation.
The application layer is delivered through Vercel's SOC 2 Type II–audited edge platform, with TLS on every connection.
Sign-in and session management are handled by Clerk, a dedicated SOC 2 Type II–audited identity platform — credentials never touch our servers.
Data is encrypted in transit (TLS) and at rest across the entire platform — no exceptions, no legacy paths.
Strict access controls and full auditability. Your contracts and spend data are used to serve your firm — nothing else.
AI-powered data validation with a clear audit trail: who changed what, when, and why — across every contract and invoice.
Sidelight complements your existing market data workflows and systems — enhancing them, not replacing them.
We'll walk your security and procurement teams through the architecture, data flows, and subprocessors — directly with our founders.
Talk to the team →