> AI agents: this is one page from Mammoth Analytics documentation. The index of all pages as Markdown is https://docs.mammoth.io/llms.txt. Append `.md` to any docs URL, or send `Accept: text/markdown`, to get Markdown.

# Security and compliance overview

> How Mammoth secures your data: sign-in methods, role-based access control, credential encryption, the Activity Log, data location, and compliance.

This section is for security reviewers, IT administrators, and Workspace Owners. Start with [Sign-in and authentication](https://docs.mammoth.io/learn/security-overview/authentication/) for how users and integrations prove their identity, or [Compliance](https://docs.mammoth.io/learn/security-overview/compliance/) for certifications.

Mammoth secures your data through identity management, role-based access control, encrypted credential storage, and an activity log. This page summarizes each area and links to the detail.

## In this section

| Page | What it covers |
| --- | --- |
| [Sign-in and authentication](https://docs.mammoth.io/learn/security-overview/authentication/) | Email/password, SSO, TOTP-based 2FA, API tokens |
| [Access control](https://docs.mammoth.io/learn/security-overview/access-control/) | Role-based hierarchy across Workspace and Project levels, with the complete roles and permissions matrix |
| [Audit logs](https://docs.mammoth.io/learn/security-overview/audit-logs/) | Chronological record of workspace and project actions |
| [Data security](https://docs.mammoth.io/learn/security-overview/data-security/) | Credential encryption and data location (AWS Ireland) |
| [Compliance](https://docs.mammoth.io/learn/security-overview/compliance/) | SOC 2 Type II, ISO 27001, GDPR, and HIPAA |

## Security at a glance

| Layer | Standard |
| --- | --- |
| Credential storage | RSA public-key encryption |
| Authentication | Keycloak: SSO, TOTP 2FA, API tokens |
| Access control | Role-based access control with Workspace and Project role tiers |
| Data location | AWS (Ireland) |
| Certifications and compliance | SOC 2 Type II, ISO 27001, GDPR, HIPAA |

## Request security documentation

To request security documentation, contact your account manager or [support@mammoth.io](mailto:support@mammoth.io).

---
Source: https://docs.mammoth.io/learn/security-overview.md · Updated: 2026-10-13