Trust,
verified.

IPTalons is built entirely on Cloudflare’s enterprise platform, which carries SOC 2 Type II, ISO 27001, and additional certifications. Every layer of our infrastructure inherits industry-leading security controls.

Encryption in transit

All traffic is encrypted via TLS / HTTPS.

Encryption at rest

Data is encrypted with AES-256 at rest within Cloudflare D1 and R2 storage.

US-based data processing

Application data is stored and processed on US-based servers.

High availability

Cloudflare’s global network delivers 99.9%+ uptime with automatic failover.

For Cloudflare’s full compliance documentation, visit the Cloudflare Trust Hub.

SOC 2 Type II

Inherited through Cloudflare’s certified infrastructure. View report

ISO/IEC 27001

Cloudflare maintains ISO 27001 certification for its information security management system.

NSPM-33

IPTalons is designed to support compliance with National Security Presidential Memorandum 33 guidelines for research security.

GDPR

We are committed to processing personal data in accordance with the General Data Protection Regulation.

IPTalons collects only the data necessary to operate the Certified Secure Researcher platform. We do not sell personal information and limit data sharing to what is required for service delivery.

Read our full privacy policy and terms of use, which outline acceptable use, intellectual-property protections, and user responsibilities.

IPTalons maintains a completed Higher Education Community Vendor Assessment Toolkit (HECVAT) to support institutional procurement and security reviews. Available upon request from the contact below.

IPTalons is designed for conformance with the Revised Section 508 Standards and WCAG 2.2 Level AA. Our platform leverages Cloudflare’s compliant infrastructure and follows modern web accessibility best practices.

A completed Voluntary Product Accessibility Template (VPAT® 2.5Rev, WCAG Edition) documents conformance across WCAG 2.0, 2.1, and 2.2 Level A and AA and the Revised Section 508 Standards. Available to institutional procurement and IT reviewers on request.

If you encounter a barrier, please reach out using the contact below.

The Certified Secure Researcher platform does not process or store payment-card data directly. All payment processing is handled by Stripe, certified as a PCI DSS Level 1 Service Provider — the highest level of certification in the payment-card industry.