Security is built in. For every organization.
Secure infrastructure
Your organization. Your own Stoa. A completely isolated environment, from the code you run to the data you store.
Isolated instance
Your organization has its own Stoa instance, isolated from everyone else.
Execution server
Run code on an execution server dedicated entirely to your organization.
Dedicated database
Store your organization’s data in a dedicated database, isolated from others.
Separate file storage
Keep documents and files in storage reserved for your organization.
Regional hosting
Store your data in the EU or choose the data center closest to you.
Application firewall
A web application firewall (WAF) helps filter out malicious requests to Stoa.
Built-in backups
Every organization’s database is backed up automatically to help protect its data.
Access & oversight
Every control, for every organization. Security is built in from day one. Audit logs, SAML SSO, SCIM and RBAC are all included.
Audit logs
Review activity across your organization with a clear record of events.
SAML single sign-on
Enable SAML sign-in by connecting and configuring your identity provider.
SCIM provisioning
Automate user provisioning and deprovisioning via your configured directory.
Role-based access
Assign roles and permissions to control access across your organization.
Enforced single sign-on
Admins can make SSO mandatory for everyone in their organization.
Session controls
Review all active sessions and revoke any access you no longer need.
Verified domains
Verify ownership of your domain to strengthen your organization’s identity.
Data encryption
Sensitive content, protected twice. All data is encrypted in transit and at rest. Conversations and document content receive an additional layer of protection.
Encrypted in transit
Data is encrypted during every transfer between your device and Stoa.
Encrypted at rest
Stored data stays encrypted, including your organization’s dedicated database.
An organization-specific key
A unique key encrypts conversations and document content before storage.
Two layers at rest
Sensitive content is encrypted, then stored in an already encrypted database.
Privacy
Your conversations stay yours. Stoa is built for confidential legal work, with a clear commitment to your privacy.
No AI training
We don’t use your organization’s conversations or data to train AI models.
GDPR compliance
We follow GDPR guidelines to protect the personal data entrusted to Stoa.
Read our privacy policy