Trust Center
Security, privacy & compliance you can verify
DBHawk is built for zero-trust data security. This is where you’ll find our certifications, the controls that protect your data, our compliance coverage, and the documents your security team needs to evaluate us.
SOC 2 Type II HIPAA GDPR 
How we protect your data
Zero-trust controls, end to end
Access & identity
SSO with Okta, Azure Entra ID and Google, MFA, and passwordless brokered database access — users never hold DB credentials.
Data protection
Fine-grained object & column access control and dynamic masking shield PII, PHI and cardholder data at query time.
Auditability
Every login, query and result is logged to the real user identity and can stream to Datadog, Splunk, or your own database.
Secrets management
Integrates with CyberArk, HashiCorp Vault and cloud vaults, so credentials stay in your vault of record.
Deployment & residency
Deploy on-prem, in your cloud, or SaaS across Windows, Mac, Linux, Docker and Kubernetes — you control where data lives.
Sovereign AI
Hawk AI runs inside your infrastructure with your own model — no public API calls, no multi-tenant data bleed, every prompt audited.
Compliance
Coverage across the regulations you answer to
DBHawk helps customers meet the access-control, masking, separation-of-duties and audit requirements of major data-protection and industry regulations.
SOC 2 Type IIGDPRHIPAASOXPCI-DSSDORAGLBA
Security posture
What your security team can count on
Independently audited — SOC 2 Type II.
Least privilege & SoD enforced for every user and AI agent.
Encryption in transit and at rest.
Complete audit trail to your SIEM of choice.
You control residency — on-prem, your cloud, or SaaS.
No shared DB credentials — brokered via your vault.
Documents & reports
Everything your review needs
SOC 2 Type II report
Available to prospects and customers under NDA.
Request report
Request report
Security white paper
Architecture, controls, and deployment options.
Download
Download
Sub-processors & DPA
Data processing agreement and sub-processor list.
View
View
FAQ
Trust & compliance — questions
Is DBHawk SOC 2 certified?
Yes — DBHawk maintains SOC 2 Type II. The report is available to prospects and customers under NDA; request it through your account team or the button above.
Where is our data stored?
You choose. DBHawk can be deployed on-premises, in your own cloud account, or as SaaS, across Windows, Mac, Linux, Docker and Kubernetes — so data residency stays under your control. Hawk AI likewise runs inside your infrastructure.
Does DBHawk see or store our database passwords?
No. Credentials are held in your secrets vault (CyberArk, HashiCorp, or a cloud vault). Users authenticate through SSO and DBHawk brokers the connection — passwords are never exposed to end users.
Which regulations can DBHawk help us comply with?
DBHawk supports access-control, masking, separation-of-duties and audit requirements for SOC 2, GDPR, HIPAA, SOX, PCI-DSS, DORA and GLBA.
Evaluating DBHawk? We'll help your security review
Request our SOC 2 report, security white paper, and a walkthrough of the controls with our team.