Upsonic runs exclusively on your servers, within your network, behind your own firewalls. As a result, we do not currently hold any SOC or PCI/DSS compliance because we do not host any of your infrastructure. You can even run Upsonic completely disconnected (air-gapped) without any impact on functionality.

The Upsonic code itself does not undergo any formal code analysis, however we scan our published images for vulnerabilities as part of the DockerHub process.