Platform

Security and compliance, precisely stated

P2HS operates the secure platform your application runs on. This page states exactly what that covers, what stays your responsibility to configure, and what we don't currently claim.

Start Building Talk to Us About Requirements

Platform security

The infrastructure layer P2HS operates underneath every generated application. See the full Privacy Policy for complete details.

Encryption in transit

Traffic to and from the platform is encrypted end-to-end.

Encryption at rest

Data is stored using AES-256 encryption.

SOC 2 Type II

P2HS infrastructure is SOC 2 Type II certified.

Ongoing audits

Regular security audits and penetration testing against the platform.

What P2HS manages, what you configure

Build your application. P2HS runs the platform underneath it—the split matters for security ownership too.

P2HS platform

  • Hosting infrastructure and secure deployment
  • Encryption in transit and at rest
  • Infrastructure-level security audits and penetration testing
  • The authentication and backend runtime your application is built on

Your application

  • The roles, permissions, and access rules you define
  • What data your application collects and how long it's kept
  • The integrations and third-party services you connect
  • Whether your use case requires a compliance regime beyond what's listed here
FAQ

Compliance questions, answered directly

Is P2HS SOC 2 certified?

Yes. P2HS infrastructure is SOC 2 Type II certified. See the Privacy Policy for full details.

Is P2HS HIPAA compliant?

Not currently. If your application handles protected health information, treat HIPAA compliance as a separate requirement to evaluate for your specific use case before launch.

Does P2HS support A2A agent connections?

Agent-to-agent (A2A) connections are being implemented and aren't yet advertised as available or compliance-scoped. The live status is published at dashboard.p2hs.com/auth.md.

Who's responsible for my application's data handling?

You configure what your application collects, stores, and who can access it. P2HS secures the infrastructure layer underneath it.

Can I get a signed BAA or security questionnaire answered?

Contact us with your specific requirements—Enterprise plans can include custom security and delivery terms.

Where do I report a security concern?

Contact us directly rather than filing a public issue, so we can investigate before any details are shared publicly.

Build your application. P2HS secures the platform.

Have compliance requirements beyond what's listed here? Tell us before you build, not after.

Start Building Talk to Us