Trust Center

IPTalons is built entirely on Cloudflare’s enterprise platform, which carries SOC 2 Type II, ISO 27001, and additional certifications. This means every layer of our infrastructure inherits industry-leading security controls.

• Encryption in transit — All traffic is encrypted via TLS/HTTPS.
• Encryption at rest — Data is encrypted with AES-256 at rest within Cloudflare D1 and R2 storage.
• US-based data processing — Application data is stored and processed on US-based servers.
• High availability — Cloudflare’s global network delivers 99.9%+ uptime with automatic failover.

For Cloudflare’s full compliance documentation, visit the Cloudflare Trust Hub.

• SOC 2 Type II — Inherited through Cloudflare’s certified infrastructure. View Cloudflare SOC 2 report
• ISO/IEC 27001 — Cloudflare maintains ISO 27001 certification for its information security management system.
• NSPM-33 — IPTalons is designed to support compliance with National Security Presidential Memorandum 33 (NSPM-33) guidelines for research security.
• GDPR — We are committed to processing personal data in accordance with the General Data Protection Regulation.

IPTalons collects only the data necessary to operate the Certified Secure Researcher platform. We do not sell personal information and limit data sharing to what is required for service delivery.

Read our full privacy policy at iptalons.com/privacy-policy.

Use of the Certified Secure Researcher platform is subject to our terms of use, which outline acceptable use, intellectual property protections, and user responsibilities.

View the full terms at iptalons.com/redbook-terms-of-use.

IPTalons is committed to meeting the cybersecurity assessment standards expected by higher education institutions. We maintain a completed Higher Education Community Vendor Assessment Toolkit (HECVAT) to support institutional procurement and security reviews.

IPTalons can provide a completed HECVAT upon request. Contact us at support@iptalons.com.

IPTalons is working toward conformance with Section 508 and WCAG 2.1 Level AA accessibility standards. Our platform leverages Cloudflare’s compliant infrastructure components and follows modern web accessibility best practices.

If you encounter any accessibility barriers, please contact support@iptalons.com.

The Certified Secure Researcher platform does not process or store payment card data directly. All payment processing is handled by Stripe, which is certified as a PCI DSS Level 1 Service Provider — the highest level of certification in the payment card industry.