# Security

Lindy is **AICPA SOC 2 Type II**, **GDPR**, **HIPAA**, and **PIPEDA** compliant. Your data is encrypted in transit and at rest, never sold, and never used to train models. Enterprise adds SSO, SCIM, and HIPAA with a signed BAA.

For the full overview of our security practices, visit our [Trust Center](https://trust.lindy.ai/).