Trust Center

Welcome to Guide’s Trust Center. This portal serves as a comprehensive, high-level resource designed to provide our customers, partners, and visitors with transparent insight into our foundational security practices, compliance standards, and data protection commitments.

At Guide (IDK Labs, Inc.), we provide a Software as a Service (SaaS) system, which includes our web application and browser extension. Because our platform handles critical user interactions, we are deeply committed to maintaining a secure, reliable, and compliant environment for the data entrusted to us.

Our Trust Posture & Security Framework

Our security program is built on continuous monitoring, rigorous operational policies, and independent third-party validation:

• SOC 2 Compliance: Guide has successfully undergone an independent audit by Sensiba LLP, receiving a SOC 2 Type 2 attestation report. This report verifies that our system controls are suitably designed and operate effectively to meet the Trust Services Criteria for Security, Availability, and Confidentiality.
• Continuous Compliance Monitoring: We utilize the Drata platform for compliance automation and continuous monitoring. This allows us to maintain centralized oversight of our information security controls, track our objectives, and receive real-time alerts to ensure our security practices remain effective day in and day out.
• Proactive Security Testing: To protect against emerging threats, we routinely subject our endpoints—including our staging environments and browser extension—to external validation, such as web application penetration testing aligned with OWASP Top 10, NIST, and SANS recommendations.
• Robust Infrastructure & Redundancy: Guide’s critical infrastructure and data are hosted using Amazon Web Services (AWS). We leverage multiple availability zones to ensure failover capability, system redundancy, and disaster recovery to support our availability commitments.
• Structured Change Management: We enforce a strict software development lifecycle. All code changes are tracked using GitHub version control, and we maintain separate, isolated environments for development and testing to ensure updates are thoroughly vetted before reaching production.

Data Protection & Supporting Policies

Our commitment to privacy and security is codified in our public and legal agreements, including our Privacy Policy—which outlines the rights of data subjects—and our Terms of Service. Furthermore, our operational practices are guided by a comprehensive suite of internal policies, including:

• Access Control and Password Policies
• Data Classification, Handling, and Retention Policies
• Network Security and Data Protection Policies
• AI Risk Management and AI System Development Policies

This Trust Center is designed to give you visibility into the evidence, policies, and certifications that back up these commitments. We invite you to explore the rest of the portal for a more detailed look at our security controls and documentation.