Filaway Trust Center

Filaway processes personal data on behalf of industrial and agricultural operators across Africa and the Middle East. This page is the single source of truth for our security posture, subprocessors, compliance status, and responsible-disclosure channel.

Compliance status

  • POPIA - Operating in compliance; Information Officer appointed.
  • GDPR - Data Processor terms available; EU residency on request.
  • SOC 2 Type I - In progress (projected 2026 Q4).
  • ISO 27001 - Roadmap 2027.

Subprocessors

NamePurposeHostingActive fromDPA
Populated by super-admin.

Data residency

Primary data residency: South Africa (af-south-1). EU customer data can be pinned to eu-west-1 on request. Backups are encrypted at rest and geo-replicated within the primary region only.

Encryption

All data in transit uses TLS 1.3. Data at rest is encrypted with AES-256 (Supabase / AWS KMS). Customer-managed keys are available on the Enterprise tier.

SLA

99.9% monthly uptime SLA on paid tiers. Planned maintenance is announced ≥14 days in advance.

Penetration test

Annual third-party penetration test. Summary available to prospects under NDA via the request form below.

Request NDA access

Responsible disclosure

Report vulnerabilities to security@3dprintingwarehouse.co.za. See our security.txt for PGP keys and safe-harbour terms.

Contacts

Security enquiries: security@3dprintingwarehouse.co.za · Privacy enquiries: privacy@3dprintingwarehouse.co.za