Trust & Security at OptiSigns
When your screens are used to guide customers, inform employees, welcome guests, or share critical updates, trust matters. OptiSigns is built to protect the platform behind those moments, with security, privacy, compliance, and reliability practices designed for organizations that depend on digital signage every day.
Subprocessors
The authorized vendor list from our DPA, with purpose and location — and how to get notified when it changes.
Device & player security
What actually runs on the hardware in your building — verified boot, storage encryption, signed software, and outbound-only networking.
Vulnerability disclosure
How to report a vulnerability to us, what's in scope, and our safe-harbor commitment to good-faith research.
Data residency & GDPR
Where your data lives, our GDPR posture and transfer mechanisms, and the EU/UK residency option.
Certifications & attestations
SOC 2 Type 2
Independent annual examination by Sensiba LLP across Security, Availability, and Confidentiality. Clean opinion, no exceptions noted, for the period ending November 15, 2025.
Request the report →
TX-RAMP Level 1
Certified under the Texas Risk and Authorization Management Program — a NIST 800-53-based state cloud-security framework administered by Texas DIR. Level 1, Certificate ID TX1342625, valid through July 2028.
See documents →
HIPAA examination
Independent AICPA examination of our Security Rule and Breach Notification controls as a Business Associate — zero exceptions, as of November 15, 2025. HIPAA has no certification; this examination is what stands in its place.
See documents →
VPAT / Accessibility
A completed VPAT (WCAG edition, Levels A and AA) is available for Section 508 and accessibility procurement reviews.
See documents →How We Protect Your Data
The short answers to the questions security reviews ask most. Every topic below is backed by controls tested in our SOC 2 Type 2 examination.
Questions?
Working through a security questionnaire? We share the SOC 2 report and document bundle first — in most reviews it answers the questionnaire outright. If your process still needs a custom fill, contact security@optisigns.com and we'll work through it with you.
