Compliance

Overview

At Ares, we are committed to maintaining the highest standards of security and compliance. We understand that protecting your data is essential to earning and maintaining your trust.

SOC 2

Ares is committed to achieving SOC 2 Type II compliance, demonstrating our dedication to security, availability, and confidentiality of customer data. Our controls are designed to meet the rigorous standards set by the American Institute of CPAs (AICPA).

GDPR

We comply with the General Data Protection Regulation (GDPR) for users in the European Economic Area. This includes:

• •Lawful basis for processing personal data
• •Data subject rights including access, rectification, and erasure
• •Data processing agreements with sub-processors
• •Appropriate safeguards for international data transfers

CASA

Ares is submitting for Tier 2 and Tier 3 approval under the Cloud Application Security Assessment (CASA), a Google-led program that evaluates third-party applications accessing Google user data. CASA verifies that our application meets rigorous security standards for data handling, authentication, and vulnerability management.

Data Security

We implement comprehensive security measures to protect your data:

• •Encryption of data in transit and at rest
• •Regular security assessments and penetration testing
• •Access controls and authentication mechanisms
• •Incident response and disaster recovery procedures
• •Employee security training and awareness programs

Sub-processors

We carefully vet and monitor all third-party sub-processors that handle customer data. Our sub-processors are contractually obligated to maintain appropriate security measures and comply with applicable data protection laws.

Data Processing Agreement

Enterprise customers can request a Data Processing Agreement (DPA) that outlines our obligations as a data processor, including security measures, sub-processor management, and data subject rights assistance.