Security

Security is part of the product

Pet businesses trust Oden with their most valuable data — their customers, their pets, and their livelihood. We take that trust seriously. Here's how we earn it.

Encryption in transit & at rest

All data is encrypted using TLS 1.2+ in transit and AES-256 at rest. Industry standard, end to end.

Cloud infrastructure

Our infrastructure runs on established cloud providers. We follow industry security best practices and review our posture regularly as we grow.

Daily automated backups

Your data is backed up daily with point-in-time recovery. We test restores regularly — so we know they work.

Strict access controls

Internal access to production data is least-privilege and limited to engineers who need it to do their work. We are working toward full audit-logged access as we scale.

Activity monitoring

We monitor platform activity for abnormal patterns and security events, with automated alerting during business hours. 24/7 monitoring is on our roadmap as we scale the team.

GDPR & privacy by design

Oden is built to comply with GDPR and modern privacy standards. You can export or delete your data any time.

Compliance

Oden is built to meet modern data protection standards. Here is where we currently stand and what we are working toward:

GDPR

Built to comply with the EU General Data Protection Regulation.

CCPA

Supports California Consumer Privacy Act data subject requests.

Working toward SOC 2

We are aligning our controls to the SOC 2 Trust Services Criteria as we scale. Contact us for current status.

PCI DSS

Payments processed by PCI-DSS compliant payment partners (Stripe).

Responsible disclosure

If you discover a security vulnerability in Oden, please report it responsibly to security@oden.pet. We commit to acknowledging your report within 24 hours, providing a timeline for a fix, and crediting you in our disclosure notes (if you'd like).

Data retention

We retain your data for as long as your account is active. When you close your account, we provide a 30-day window to export your data, after which it is permanently deleted from our systems and backups.

Have a security question?

We're happy to answer detailed questions about our security posture. Reach out to security@oden.pet and our team will get back to you. For enterprise evaluations, we can provide a security questionnaire response and discuss a DPA.