The commitment to security is a top priority for us, so we are continuously striving to improve and adapt measures to counter evolving threats. We have a number of technical and organizational measures in place at several levels to safeguard the confidentiality, integrity and availability of all data and ensure the overall security of our services.
Encryption and Data Security
Our systems are encrypted using industry-standard cryptographic protocols such as TLS (Transport Layer Security). Data at rest is encrypted using strong encryption algorithms, adding an extra layer of protection to stored information. Regular data backups are performed to ensure data integrity and availability.
Access Management
Access to our systems and databases is strictly controlled based on the principle of least privilege. User access is granted only to authorized personnel after proper identification, the access is granted based on the “need-to know” principle. We do employ robust authentication mechanisms, such as multi-factor authentication (MFA), to ensure secure user access. Accesses to our system are monitored and regularly audited during security audits.
Google Cloud Security
We use ISO27001 and SOC 2 certified Google Cloud as our server and data storage provider. Google Cloud is one of the world's most advanced server infrastructure providers with state of the art security and data protection.
General information about the security of Google Cloud:
https://cloud.google.com/trust-center/
Information about the physical security of Google Cloud data centers:
Information about GDPR compliance of Google Cloud:
https://cloud.google.com/privacy/gdpr
GDPR & CCPA/CPRA Compliance
We are compliant with the Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR). Furthermore, we also comply with the California Consumer Privacy Act of 2018 (CCPA) and the California Privacy Rights Act of 2020, also known as Proposition 24 (CPRA). For more information about personal data protection please see our Privacy policy.