Security at Traista

Encrypted, always

All data is encrypted in transit (TLS 1.2 and 1.3) and encrypted at rest. Nothing travels or sits unprotected.

Private by default

Lost-item photos are kept in private storage that is never publicly accessible. Each image is served only after we confirm the viewer is authorized to see it.

Hosted, and separate

Traista is a fully hosted service — nothing is installed in your environment, and we never require access to your own systems or network. Each organization’s data is logically separated and access-scoped to that organization.

Built on audited infrastructure

Traista runs on leading cloud providers that are independently audited to SOC 2 and ISO 27001 standards.

Payments you can trust

Payments are processed by Stripe at PCI DSS Level 1, the highest tier. Traista never stores card numbers.

Accounts protected

Passwords are hashed and unreadable, even to us. Logins are shielded by reCAPTCHA, staff only see the locations they are assigned to, and removed staff lose access immediately.

Hardened by design

Uploaded images are re-encoded on our servers, so stored files cannot carry hidden scripts and metadata such as photo GPS location is removed. Industry-standard security headers protect every page.

Your guests trust you with their lost belongings — IDs, electronics, wallets and more. We protect that data the way you would expect, and we are happy to show your security team exactly how.