Our Security Commitment

We use industry-standard encryption technologies to ensure your data is protected both at rest and in transit. All connections to our platform are secured using TLS 1.3 with strong ciphers, ensuring that your information cannot be intercepted while being transmitted over the internet.

Your reports, client information, and personal data are encrypted at rest in our databases using AES-256 encryption, one of the strongest encryption standards available.

We partner with Clerk, a leading authentication provider, to ensure secure access to your account. Our authentication system includes:

• Strong password requirements and secure password hashing
• Multi-factor authentication options
• Automatic session timeouts and secure session management
• Failed login attempt limiting to prevent brute force attacks

We regularly review and update our authentication mechanisms to address emerging security threats and follow industry best practices.

We perform automated backups of all data on a regular schedule to ensure your information is never lost:

• Hourly incremental backups
• Daily full backups
• Weekly offsite backups
• 30-day retention for historical backups

All backups are encrypted using the same strong encryption standards as our primary data storage.

Our security team conducts regular vulnerability assessments and penetration testing to identify and address potential security weaknesses:

• Automated security scanning of our codebase and dependencies
• Regular third-party security audits
• Continuous monitoring for unusual activities
• Prompt deployment of security patches

We maintain an ongoing security improvement program to ensure our platform remains secure against evolving threats.

We have a comprehensive security incident response plan to quickly address any potential security breaches or vulnerabilities:

• 24/7 monitoring for suspicious activities
• Dedicated security team for incident investigation and response
• Structured communication plan for timely notifications
• Regular testing of our incident response procedures

In the unlikely event of a security incident affecting your data, we are committed to providing transparent and timely communication.