Carrot Trust Center

The Carrot application is hosted on Microsoft Azure, a top-tier cloud provider that undergoes extensive audits in technical and physical security.

Carrot adheres to a rigorous and secure Software Development Lifecycle (SDLC) to ensure only safe and stable updates are shipped to our application.

Carrot undergoes annual penetration testing from a third-party auditor and continuously scans our application and system for vulnerabilities.

All data is encrypted in transit (TLS 1.2) and at rest (AES-256).

Employers have the option to connect their SAML identity provider (e.g., Okta, G Suite, OneLogin) for seamless and secure authentication.

Carrot maintains a rigorous anti-money laundering (AML) program designed to prevent our platform from being used as a vehicle for money laundering.