Security

Summit53 is built with security at its core. We have completed a Cloud Application Security Assessment (CASA) at Tier 2 — independently lab-tested and verified by the App Defense Alliance.

CASA Tier 2 Certified — App Defense Alliance

CASA Tier 2 — Lab Tested & Verified

Certification ID
21cd9aa8
Assessed by
TAC Security (authorized CASA lab)
Issue date
December 9, 2025
Expiration date
December 10, 2026
Status
Complete — All requirements passed

What is CASA?

The Cloud Application Security Assessment (CASA) is a security framework administered by the App Defense Alliance. It is based on the industry-recognized OWASP Application Security Verification Standard (ASVS) and provides a consistent, rigorous set of requirements for secure cloud application development.

CASA Tier 2 requires an independent third-party lab to test and verify the application against all applicable requirements — it is not a self-assessment.

14 Security Categories — All Passed

Summit53 was assessed and passed all 14 OWASP-aligned security categories:

Architecture, Design and Threat Modeling
Authentication Verification
Session Management Verification
Access Control Verification
Validation, Sanitization and Encoding Verification
Stored Cryptography Verification
Error Handling and Logging Verification
Data Protection Verification
Communications Verification
Malicious Code Verification
Business Logic Verification
File and Resources Verification
API and Web Service Verification
Configuration Verification

Our Security Principles

  • Least-privilege access. Summit53 requests only the CRM permissions required to deliver review insights.
  • Per-tenant data boundaries. Customer data is isolated — no cross-tenant access.
  • Privacy by design. Your data is yours. Full stop.
  • Export controls. You control what data leaves Summit53.
  • Single sign-on. Google SSO is supported today. SAML/OIDC support for enterprise identity providers (Okta, Azure AD) is on the roadmap.

Have security questions?

We're happy to walk through our security posture, share assessment details, or support your vendor risk review process.

Contact Us