# Is Emolysis certified for SOC 2 or similar standards?

> No, Emolysis is in private development and has not been through a third-party audit, penetration test or compliance certification.

No. Emolysis is in private development and has not been through a third-party security audit, penetration test or compliance certification. We do not claim one until it is done.

What we can share now is how Emolysis is designed: platform credentials kept on your machine, Emolysis's services kept away from your data platform, signed desktop builds for macOS and Windows and a published checksum for Linux (none is released yet), a GitHub App with narrow permissions (planned), and an exportable session log of what the agent did (planned).

The [security page](https://emolysis.com/security) and the [data handling docs](https://emolysis.com/docs/data-handling) are the source of record for the security design, and a fuller description of it is planned before the first release. To report a security concern, email [hello@emolysis.com](mailto:hello@emolysis.com) and do not include credentials or real data.

---

Page: https://emolysis.com/faq/security-certifications. Emolysis is a product of Bandpey GmbH, Munich, Germany. It is in private development, and nothing is released yet.