Data security

At the core of our operations, we prioritize data security to ensure the integrity, confidentiality, and availability of our clients' information. We adhere to industry best practices and employ robust cybersecurity measures to safeguard data throughout its lifecycle. Here are the key elements of our data security strategy:

SOC 2 Compliance

We align our processes and infrastructure with SOC 2 standards, focusing on the principles of security, availability, processing integrity, confidentiality, and privacy. Our external platforms, including those from our third-party service providers, are SOC 2 certified. We are also in the process of obtaining our own SOC 2 certification, underscoring our commitment to the highest standards of data security.

Client Data Isolation

To ensure the highest level of data privacy and security, we maintain a separate database for each client. This approach guarantees that data is isolated by default, eliminating the risk of cross-client data access and ensuring that each client's information is securely compartmentalized.

Data Encryption

Data in transit, is encrypted using industry-standard encryption protocols. This ensures that data is protected from unauthorized access and breaches during storage and transmission.

Access Control

We implement strict access control policies to regulate who can access sensitive information. Access to data and systems is granted on a need-to-know basis and is regularly reviewed to ensure compliance with our security policies. Each client can define who can access their information and whether they want to share it with external users, such as auditors.

Audit and Monitoring

We continuously monitor our systems for any suspicious activities and maintain detailed logs of access and changes to data. These logs are regularly reviewed to detect and respond to potential security threats promptly.