Security & Compliance

SOC 2 Type II certification

Instanodes carries SOC 2 Type II certification. An independent auditor verified the security controls over a period of time, not a single point-in-time snapshot, confirming the controls operate as described. For customers running production DeFi, wallet, or institutional infrastructure, this certification is usually the first item a security or compliance review asks for.

Access control

API key management is encrypted. Dashboard access supports role-based permissions, so your team separates who deploys or deletes infrastructure from who only views usage metrics. Rotating a compromised key takes a dashboard action, not a support ticket.

Network-level protection

DDoS mitigation operates at the network level. You configure nothing yourself. Infrastructure stays isolated per client, so one customer's traffic spike, misconfiguration, or attack surface never degrades another customer's service on the same shared infrastructure.

Enterprise security requirements

Enterprise clients request full security posture documentation and discuss data residency requirements directly with the Instanodes team. Regulated customers, including financial institutions and government-adjacent deployments, use this process to confirm where data physically lives and how the team handles the data, before signing off on a vendor. Questions about audit access, incident notification timelines, and compliance framework alignment beyond SOC 2 get resolved on a per-contract basis. Talk to us to start the conversation.