Data protection and security

Your trust is our top priority. We implement robust security measures to protect your data:

• Our infrastructure is SOC 2 compliant, ensuring we meet high standards for security, availability, and confidentiality

• We use industry-standard encryption to protect data in transit and at rest

• We regularly review and update our security practices

• Our app undergoes regular security reviews and audits every 5 days to maintain the highest level of protection for your data

NIST Cybersecurity Framework Implementation

We have implemented key elements of the NIST Cybersecurity Framework 2.0 to enhance our security posture:

• Asset Management: We maintain a comprehensive inventory of all devices and software used in our operations, ensuring all assets are accounted for and secure.

• Access Control: We implement strong authentication methods and follow the principle of least privilege to ensure only authorized personnel can access sensitive data.

• Data Security: We employ encryption for data at rest and in transit, and have established secure data backup and recovery procedures.

• Information Protection: We have implemented measures to protect against malware and regularly update our systems and software.

• Awareness and Training: Our staff undergoes regular cybersecurity awareness training to maintain a security-conscious culture.

• Anomalies and Events: We have systems in place to detect and analyze unusual activities that may indicate a security incident.

• Security Continuous Monitoring: We continuously monitor our systems for cybersecurity events and verify the effectiveness of protective measures.

• Response Planning: We have developed and maintain an incident response plan to ensure quick and effective response to potential security incidents.