Platform / Features

Security your customers can verify

SOC 2® Type II, granular permissions, and infrastructure built to keep your Grasshopper definitions private - with a trust center where security reviewers can see the controls and request the reports.

SOC 2 Type II report, audited by Sensiba.

AICPA SOC for Service Organizations logoSensiba SOC 2 Type II badge

Audit and evidence

SOC 2 Type II, and a trust center to check it

ShapeDiver has a SOC 2 Type II report from an independent audit by Sensiba. Rather than ask you to take that on faith, we keep a trust center where a security team can see the controls we hold and request the current SOC 2 report and supporting documents under NDA. If procurement needs to review us, that’s the place to start.

SOC 2 Type II

Audited by Sensiba, with the report and supporting documents available under NDA through the trust center.

Your definitions stay private

Your IP doesn’t leave your control

The Grasshopper definition behind a model is your intellectual property, and ShapeDiver is built so that sharing a model never means sharing the definition. It stays on our servers, out of sight; people use the app (set parameters, get outputs) without ever seeing or downloading the logic. Inputs you mark as secret aren’t exposed to the browser or the API.

Diagram: your definition and any secret inputs stay on the ShapeDiver servers; people using the app or the API send parameters and get results back, never the logic

Access and permissions

Decide exactly who can do what

Access is yours to control, per model and per person. Share a model publicly by link, or grant named users specific permissions, such as view, export, and download, so people get only the access they need. Programmatic access is authenticated with JWTs and API keys, and single sign-on (SSO) is available for connecting access to your own identity provider.

Diagram: share a model by private link or with named users, each with their own permissions (view, export, download); the definition stays hidden either way

Infrastructure and reliability

Run on infrastructure built to stay up

ShapeDiver runs on AWS, with auto-scaling Rhino/Grasshopper servers, multi-tier caching, and zero-downtime deploys, across shared cloud regions in the EU, the US, and Asia. We have a 99% uptime record (our standard-plan commitment is 98%, best effort). Enterprise customers can run on a dedicated, isolated environment and add a formal 99.9% SLA; on the standard plans you’re on shared, SOC 2 Type II audited infrastructure with your definitions kept private.

Uptime record
99%
Standard plans
98%
best effort
Enterprise SLA
99.9%
optional
Diagram: the platform runs on SOC 2 Type II audited infrastructure with regions in the EU, the US, and Asia, plus dedicated environments for Enterprise

Security & Trust

Bring us to your security review

If your team needs to vet ShapeDiver before you build on it, talk to us - we’ll walk you through the controls and get you the documents you need. The trust center is open whenever you want to look first.

Talk to our team

Your Business

How can we help?