US-EN 
Argentina (AR)
Brazil (BR)
Chile (CL)
Colombia (CO)
Ecuador (EC)
Mexico (MX)
Peru (PE)
Venezuela (VE)
SECURITY Your most sensitive data, protected at every step
We protect your company's and employees' information with enterprise-grade security controls, reliable infrastructure, and processes designed to ensure the privacy and availability of your data at all times.
- Protected data
- Secure access
- Continuous monitoring
Backed by international standards
Security built into every layer, from the product to our infrastructure.
-
SOC 1 TYPE I
Financial controls
Assesses the design of controls related to processes that may impact customers' financial information.
-
SOC 1 TYPE II
Control effectiveness
Assesses the design and operating effectiveness of financial controls over a specific period.
-
SOC 2 TYPE I
Security controls
Assesses the design of controls implemented to protect our customers' systems, data, and information.
-
SOC 2 TYPE II
Security effectiveness
Assesses the operating effectiveness of security controls over a specific period.
Security at every layer of Runa
Check your implementation progress and the pending tasks for each stage.
-
Product Security
Secure platform built by design
Product Security
Description:
Security is embedded throughout the Runa platform—from architecture and authentication to deployment and monitoring.
Highlights:
- Secure application architecture
- Environment isolation
- Least-privilege design
- Defense-in-depth principles
-
Data Protection
Encrypting data at every layer
Data Protection
Description:
Customer information is protected using modern encryption standards while stored and transmitted. Sensitive information is isolated using customer-specific encryption controls where appropriate.
Highlights:
- AES-256 encryption at rest
- TLS encryption in transit
- Secure key management
- Customer data isolation
-
Access Management
Access limited to authorized users
Access Management
Description:
Access to production systems is limited to authorized personnel based on business need. Administrative access is protected with multiple layers of authentication and periodic access reviews.
Highlights:
- Role-based access control
- Multi-factor authentication
- Least privilege
- Periodic access reviews
-
Infrastructure
Secure, scalable cloud infrastructure
Infrastructure
Description:
Runa operates on Amazon Web Services using highly available, fault-tolerant cloud infrastructure designed for scalability and resilience.
Highlights:
- AWS-hosted platform
- Multi-AZ architecture
- Infrastructure as Code
- Containerized workloads
-
Network Security
Protected networks and secure connectivity
Network Security
Description:
Production systems are protected through network segmentation, restricted access, secure private networking, and layered security controls.
Highlights:
- Private networking
- Restricted inbound access
- VPN connectivity
- Web application protections
-
SDLC
Security integrated into development
SDLC
Description:
Security is integrated into every stage of software development—from design through deployment—to help ensure code quality and platform reliability.
Highlights:
- Peer code reviews
- Automated testing
- Secure CI/CD
- Version control
-
Incident Response
Continuous monitoring and rapid response
Incident Response
Description:
Our engineering teams continuously monitor platform health and security events. Incidents follow documented response procedures with root cause analysis and continuous improvement.
Highlights:
- Continuous monitoring
- Automated alerting
- Incident response
- Post-incident reviews
-
Business Continuity
Prepared for unexpected disruptions
Business Continuity
Description:
Business continuity and disaster recovery procedures are designed to help maintain service availability and support rapid recovery during unexpected events.
Highlights:
- Backup strategy
- Disaster recovery planning
- Recovery testing
- Service restoration procedures
-
Security Testing
Regular testing and vulnerability management
Security Testing
Description:
Runa continuously evaluates its security posture through automated testing and independent security assessments.
Highlights:
- Vulnerability scanning
- Penetration testing
- Patch management
- Security remediation
-
Privacy
Privacy-first, compliance-driven operations
Privacy
Description:
Runa aligns its security program with recognized industry frameworks and maintains policies designed to protect customer privacy and support regulatory compliance.
Highlights:
- SOC-aligned controls
- Privacy program
- Customer transparency
- Compliance documentation
-
Reliability
Reliable infrastructure with high availability
Reliability
Description:
The platform is engineered for reliability using redundant infrastructure, automated scaling, and continuous operational monitoring.
Highlights:
- High availability
- Auto scaling
- Fault tolerance
- Operational monitoring
-
Risk Management
Continuous assessment and risk reduction
Risk Management
Description:
Security risks are continuously evaluated, prioritized, and addressed through governance processes, audits, and ongoing improvements.
Highlights:
- Risk assessments
- Security reviews
- Continuous improvement
- Governance practices
The security behind Runa
We protect your data at every layer of our technology.
Security built in by design
We built Runa with security from the ground up to protect your data in every feature.
Privacy by design
Privacy and security controls built into every feature from the start.
Data architecture and protection
Secure architecture, data validation, and protection controls in every module.
Continuous monitoring and testing
Event logging, monitoring, and continuous testing to detect and fix vulnerabilities.
Security and availability built into our infrastructure
We operate on secure, resilient infrastructure to protect your data and keep Runa available.
Secure, scalable infrastructure
Enterprise cloud infrastructure designed to deliver security, availability, and scalability.
Continuous monitoring and backups
24/7 monitoring and regular backups to protect your information and support recovery.
Continuity and recovery
Documented continuity and disaster recovery processes to minimize disruptions.
RUNA TRUST CENTER
All our security, fully documented.
We centralize certifications, policies, reports, and documentation to simplify your security and compliance assessments.
View trust centerWe build with security from day one
We integrate security at every stage of development to protect our platform and your data.
Secure development (SDLC)
We apply security controls throughout the design, development, and release cycle.
Vulnerabilities and testing
We continuously assess vulnerabilities and run independent penetration tests.
Monitoring and incident response
We have 24/7 processes in place to detect, investigate, and respond to potential security incidents.
We vet everyone who works with us
We extend our security standards to the vendors and subprocessors that are part of our operations.
Vendor assessment
We evaluate the security and privacy practices of vendors and subprocessors before working with them.
Periodic reviews
We regularly review our vendors' compliance and controls.
Contractual standards
We establish security and data protection requirements through contractual agreements.
What our customers say about security at Runa
Explore more than 150 success stories from companies of all sizes across more than 20 industries.
“From the beginning, we knew we needed a solid foundation to scale our payroll operation in Mexico with security, efficiency, and full compliance.”
Rodrigo Sanchez
Communications Lead
“With Runa, we found a reliable platform that allows us to operate efficiently and provide clarity to the entire team.”
Gerry Giacomán
Co-Founder & CEO
“With Runa’s software, we were able to manage payroll directly and without errors, through a much more efficient process adapted to our needs. We feel much more secure and at ease with every payment and calculation we make.”
Norma Isela
Human Resources Manager
“With Runa, we have successfully simplified and automated key payroll and human resources processes. Today, we have greater visibility over our team and can manage our team members' information much more efficiently.”
Administration Team
Comex
“With Runa, we found much more than just a payroll provider. Today, we have a team that understands the complexity of our operations and supports us through every payment cycle, allowing us to work with greater confidence, efficiency, and visibility over our processes.”
Human Resources Team
Cementos Cruz Azul
“With Runa, we’ve been able to completely simplify payroll and team management across our operations. Having our employees’ information centralized allows us to focus on what matters most: delivering a great experience for our customers.”
Operations Team
Punto de Cielo
“Runa has helped us automate key payroll and HR processes for our teams. Today, we can manage our employees' information much more quickly, efficiently, and in a more organized way.”
Payroll and HR Management
El Pollo Loco
“With Runa, we have a stable and committed team, errors have been reduced to a minimum, and everything stays automatically updated, without us having to worry about legal or technical matters.”
Martha Llano
HR Manager
The platform that connects all of Runa
All platform capabilities are included with any Runa software, so everything works connected from a single place.
-
AI
Automate payroll and HR tasks with hundreds of AI agents connected to your platform.
-
Data
Centralize your employee data and keep all your modules updated.
-
Active
Security
Protect your data and processes with security built-in by design.
-
Roles and Permissions
Define who can view, edit, and perform actions within Runa.
-
Workflows
Automate processes, tasks, and approvals across all your modules.
-
Integrations
Connect Runa with your tools and keep your data synchronized.
-
Reports
Turn your data into insights for better decision-making.
-
Employee Access
Give each employee access to information, requests, and tasks.
Have questions?
We have answers.
Frequently asked questions
How does Runa protect my company's and employees' data?
We protect your data with multiple layers of security, including encryption, access controls, continuous monitoring, backups, and secure development practices.
What security certifications does Runa have?
Runa holds SOC 1 and SOC 2 certifications, which independently assess our controls and processes related to security and information protection.
How does Runa control access to information?
We apply role-based access controls and the principle of least privilege, along with mechanisms such as multi-factor authentication (MFA) and Single Sign-On (SSO).
How does Runa evaluate its vendors and subprocessors?
We evaluate their security and privacy practices before working with them, conduct periodic reviews, and set data protection requirements through contractual agreements.
Where can I find Runa's security documentation?
In our Trust Center, you can find certifications, pentesting reports, security policies, information about subprocessors, and other documentation relevant to your security and compliance assessments.
