Security and compliance overview
This section is for security reviewers, IT administrators, and Workspace Owners. Start with Sign-in and authentication for how users and integrations prove their identity, or Compliance for certifications.
Mammoth secures your data through identity management, role-based access control, encrypted credential storage, and an activity log. This page summarizes each area and links to the detail.
In this section
| Page | What it covers |
|---|---|
| Sign-in and authentication | Email/password, SSO, TOTP-based 2FA, API tokens |
| Access control | Role-based hierarchy across Workspace and Project levels, with the complete roles and permissions matrix |
| Audit logs | Chronological record of workspace and project actions |
| Data security | Credential encryption and data location (AWS Ireland) |
| Compliance | SOC 2 Type II, ISO 27001, GDPR, and HIPAA |
Security at a glance
| Layer | Standard |
|---|---|
| Credential storage | RSA public-key encryption |
| Authentication | Keycloak: SSO, TOTP 2FA, API tokens |
| Access control | Role-based access control with Workspace and Project role tiers |
| Data location | AWS (Ireland) |
| Certifications and compliance | SOC 2 Type II, ISO 27001, GDPR, HIPAA |
Request security documentation
To request security documentation, contact your account manager or support@mammoth.io.