Compliance

Railway is designed to be used by companies of all sizes. We understand that companies have different needs when it comes to compliance and security. We are happy to work with you to ensure that Railway meets your needs. We have worked with teams in gov't, healthcare, and finance to ensure that Railway meets their needs.

Companies choose Railway so that they can speed up their development velocity while also maintaining their security and compliance posture.

We are happy to sign NDAs with your company to provide additional information about our security and compliance practices. Please reach out to us at team@railway.app to get started.

Certifications

We know that your businesses need to develop strong and lasting relationships with your vendors to build confidence that we can be trusted to deliver your workloads. Part of that is through certifications, audits, and continual refinement of our practices. Railway aims to comply with all the distributions of workloads and privacy procedures.

SOC 2

Railway is currently in the process of attaining SOC 2 certification.

We are undergoing this process with our vendor, Drata. After completion, we plan to publish a compliance portal via our vendor. For updates, you can subscribe to the road-map item on our road-map board.

Highly motivated customers who are in the process of securing SOC2 certification can request a security questionnaire where the Railway team will provide relevant information about vendor usage and Railway employee acesss procedures.

HIPAA BAA

Railway follows a shared responsibility model for HIPAA compliance. Railway will make its best effort to advise your company on setting up encryption for your data, auditing the storage of keys, establishing access control, and ensuring secure storage of sensitive patient data. When a BAA is in effect, the Railway team will no longer be able to directly access your running workloads. BAAs are only available on our Enterprise offerings.

If your company needs a BAA, you can contact our solutions team at team@railway.app.

We are working on operationalized BAAs and continually gathering requirements for health-focused workloads for Enterprises. You can subscribe to the road-map item and share your feedback on our road-map board.

Privacy

Railway is committed to protecting the privacy of our users. We understand that when working with user code and data, it is important to have a clear understanding of how we handle your data. Railway, on behalf of our users, may remove offending workloads but at no point will a Railway team member modify your application without your expressed permission through an approved communication channel.

Click here to see our Privacy Policy.

VAT / Address

For customers who require VAT tax collection, you can add your company VAT Tax ID and company address via the Pro plan billing portal for your respective workspace.