> ## Documentation Index
> Fetch the complete documentation index at: https://docs.getsmartalex.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Security pack

> The detailed security material SmartAlex shares under a non-disclosure agreement, what it contains, and how to request it.

Most of our security posture is public on these pages. Some material is more detailed than is safe to publish, because it would help an attacker more than it helps you. We share it with qualified customers and prospects under a non-disclosure agreement.

## What is in the pack

| Item | What it tells you |
| - | - |
| Penetration-test summary | What independent testers looked at and how findings were resolved |
| Data protection impact assessment | Our assessment of the risks of processing voice and contact data, and the measures against them |
| Risk register | The security and privacy risks we track and how each is treated |
| Recovery objectives | Our recovery-time and recovery-point objectives |
| Infrastructure providers' assurance reports | The independent audit reports our main infrastructure providers hold |
| Sub-processor security questionnaires | The security answers our key suppliers gave us |
| Vendor risk register | How we assess and monitor the suppliers on our [sub-processor list](https://docs.getsmartalex.com/trust/subprocessors.md) |

## How to ask for it

```mermaid theme={null}
flowchart LR
    Ask["Email the security team"] --> NDA["Sign a non-disclosure<br/>agreement"]
    NDA --> Send["We send the pack"]
    Send --> Q["Follow-up questions<br/>or a call with us"]
```

Email [security@getsmartalex.com](mailto:security@getsmartalex.com) with your company name, your role, and what you are assessing.

> [!NOTE]
>
> SmartAlex does not currently hold its own SOC 2 or ISO 27001 attestation and we never imply that it does. The assurance reports in the pack are those of our infrastructure providers. Our position is on the [Compliance & certifications](https://docs.getsmartalex.com/trust/compliance.md) page.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.