Trust and Security

Cakewalk's security posture across the platform: infrastructure isolation, organizational controls, availability and certifications.

These controls apply across the platform, whichever modules of Cakewalk your company runs.

🛡️ Infrastructure Security

• Hosted on AWS with multi-tenant isolation (separate DB per customer).
• Data stored in Europe by default.
• Encryption at rest and in transit.
• Restricted production access with audit logs.

💡 Why this matters: Ensures your data is segregated, encrypted and protected at the platform level.

---

👥 Organizational Security

• SSO + MFA for internal systems wherever available.
• Role-based employee access management.
• Regular access and vendor reviews.
• Secrets and API keys stored only in AWS Secrets Manager.
• Employee background checks and ongoing security training.

💡 Why this matters: Minimizes insider risk and ensures staff follow strict controls.

---

🌐 Availability & Continuity

• Backups stored across multiple availability zones.
• 24/7 continuous monitoring of systems.
• Disaster recovery plan tested annually.

💡 Why this matters: Your service stays available even under failure scenarios.

---

📜 Compliance & Trust Center

• ISO 27001:2022 certified.
• View our full security posture, policies and certifications anytime in the Cakewalk Trust Center.

💡 Why this matters: Transparent compliance documentation for your auditors.

For how the MCP Gateway (the checkpoint agent traffic passes through) handles credentials and audit records, see Trust and Security in the Agent Access docs.