SOC 2 Type II

Independently audited

AES-256

Encryption at rest & in transit

24/7 Availability

Infrastructure monitoring

3 Deployments

Flexible hosting environments

Trusted by leading companies
johnson-and-johnson-logo
schneider-electric-logo
bridgestone-logo
siemens-logo
verizon-logo
hp-logo
fidelity-investments
intel-logo
Why it matters

Secure reporting can't be an afterthought

Regulatory violations carry fines from thousands to millions of dollars. Most breaches originate inside the organization, from excessive access or a misconfigured dashboard, not an outside attacker.

Report Access Control

Report access control

Dashboard access isn't enough. Someone must decide which reports each person can reach, essential for secure reporting.

No Record of Who Did What

No record of who did what

Regulators ask who accessed what data and when it happened. Without a record, that question has no answer at all.

Fragmented Deployments

Fragmented deployments

Cloud, on-premises, and hybrid deployments each carry different isolation and protection requirements.

No Shared Data Across Sites

No shared data across sites

Multitenant use needs real separation. Each site's users, sources, and reports stay invisible to every other site.

How it's built

A security layer at every point in the request path

Every report request passes through the same stack, whether it's a dashboard view, an export, or an admin action.

  • Authentication: local credentials, LDAP, Azure ADFS, or OpenID Connect/OAuth 2.0.
  • Authorization: read, write, create, and delete permissions per report, source, and dataset.
  • Data security: per-site isolation, so one site's users and data are never visible to another.
  • Application security: unique per-installation keys encrypt stored passwords and connection details.
  • Network security: TLS 1.2+ recommended end to end, from browser to server to database.

Client browser or app

TLS 1.2+ / HTTPS

Bold Reports server

Authentication (LDAP, Azure ADFS, OAuth 2.0)

Authorization (role & site permissions)

Per-site data isolation

Encrypted database & stored credentials

Deployment

The same secure reporting standard, whichever way you deploy

Moving between cloud, on-premises, and managed private cloud shouldn't mean re-architecting your security controls.

Cloud On-premises Managed private cloud
Infrastructure Shared, multi-tenant, operated by Bold Reports Your own servers, Windows, Linux, Docker, or Kubernetes Dedicated, isolated environment, operated by Bold Reports
Core platform & features Identical across editions Identical across editions Identical across editions
Encryption keys Managed by Bold Reports Customer-held Managed by Bold Reports
Data residency Bold Reports-hosted Your infrastructure only, air-gap capable Bold Reports-hosted, isolated to your org
More protections

Control over where your data lives and who sees it

Secure data reporting means more than encryption and access control. These protections give you a say over data location, row-level visibility, and every export leaving the platform.

Data Sovereignty

Data sovereignty

Host Bold Reports in your own private data center or public cloud, keeping data within the region you choose. No third party, including Syncfusion, can access your information, and you retain full control over infrastructure and retention policy.

Row Level Security

Row-level security

Define access rules per user or group so each person only sees the data they're allowed to view, ideal for multitenant and departmental reporting, and central to data security across every report you publish.

Secure Document

Secure document export

Reports exported to PDF, Excel, or Word carry the same protection standard, wherever they end up, including watermarking and access expiry, which is core to secure reporting across every format your teams share.

Platform

Enterprise-grade security for cloud reporting

Protecting your reports and data is core to secure reporting at Bold Reports. From encryption and access controls to platform security and compliance practices, we help organizations confidently manage reporting in the cloud.

Visit trust center

Hosting & infrastructure

Hosted on secure Azure, Google Cloud, and DigitalOcean infrastructure.

Authentication

Sign in locally or through your existing identity provider.

Compliance

Security and compliance practices aligned with enterprise goals.

Support

Access security documentation and resources whenever you need them.

FAQ

Common questions

Bold Reports supports HIPAA compliance requirements, using the same encryption, access control, and isolation model described in the architecture section above.

Yes. Bold Reports maintains GDPR compliance with customers across Europe under that same security model.

SOC 2 Type 2 and ISO 27001, both verified through independent audits. Details are published on our legal center.

Bold Reports uses Stripe, a PCI-compliant payment processor, to handle billing. Bold Reports itself never has access to your credit card data.

On-premises deployment keeps all data inside your own infrastructure and region, which is the usual path for jurisdiction-specific residency requirements.

Yes. SOC 2, HIPAA, and GDPR overviews are published on our security & legal center, along with a compliance request form for additional documentation.

AES-256 and TLS 1.2+ (1.3 ready) protect data at rest and in transit, with Rijndael and RSA encryption safeguarding stored credentials and connection details.

Permissions are set per report, data source, and dataset, with read, write, create, and delete controlled separately, and each site's users and data kept isolated from other sites.

Yes. The server logs application events and errors as users interact with the platform, which our support team can use to investigate reported issues.

Bold Reports supports local authentication as well as LDAP, Azure ADFS, OpenID Connect, and OAuth 2.0 for external identity providers.

Yes. The application and its underlying infrastructure are actively monitored 24/7, with engineers notified immediately if something goes wrong.

 

Secure reporting at Bold Reports means encryption, access control, and audit logging apply identically across cloud, managed private cloud, and on-premises, not just on one plan.

Yes. Cloud, managed private cloud, and on-premises all run the identical feature set and security standard, so the choice comes down to data residency and infrastructure preference.

A dedicated, isolated cloud environment: Bold Reports manages the infrastructure, backups, and patching, while you control access, encryption keys, and compliance responsibility.

On cloud, Bold Reports manages keys in a hardware security module by default, or you can bring your own. On managed private cloud and on-premises, key management is yours.

No. The same standard, encryption, access control, and audit trail architecture apply to cloud, managed private cloud, and on-premises, so moving between them doesn't mean re-architecting security.

Yes. Because report definitions are RDL and RDLC based and security controls are consistent across deployments, moving later doesn't require a rebuild.

You're not limited to a shared cloud: self-hosted and managed private cloud options, customer-controlled encryption keys on-premises, per-site data isolation by default, and enterprise SSO all come standard.

Ready to Get Started?

Your data deserves secure reporting

Start free and see the same security standard hold across cloud, on-premises, and managed private cloud.

No credit card required.

Start your free trial
Talk to sales