Security & ISO27001 / SOC2 Compliance

Certified EU infrastructure

AlpaCore Engine runs on EU-region cloud infrastructure. Production compute and data stores are hosted in certified European datacenters that operate under ISO/IEC 27001 and SOC 2 control frameworks at the infrastructure layer.

What this means for customers

Card data is processed by licensed payment providers (Revolut Merchant SCA). AlpaCore does not store full card numbers. Application traffic is served over HTTPS/TLS. Access to owner operations is gated.

ISO/IEC 27001

Production compute and data stores run in certified EU datacenters that operate an ISO/IEC 27001 information-security management system at the infrastructure layer: access control, encryption in transit, change management, and incident response.

SOC 2 Type II

The same EU datacenter layer is independently attested under SOC 2 Type II for security, availability, and confidentiality over a continuous audit period — not a point-in-time snapshot.

Carbon Neutral Compute

Engine workloads are hosted on carbon-neutral EU compute. The infrastructure provider matches residual emissions and publishes environmental terms for the region that serves alpacore.net.

Live system status

Engine health, SLA target (99.99%), and runtime identity are published at the public status endpoint.

Open System Status & SLA →