We take security very seriously. We understand that this is crucial for you. And that any scandal with the cloud security would put our whole business in a bad light.
Backups
We backup data to a special dedicated backup server (SSAE-16/SOC-2 compliant). We combine daily, weekly, monthly backups, so that we can restore data one year backwards. All of the backups are encrypted on our side and on the side of the backup server as well. We have a very strict policy regarding handling the backup restore in case it would be needed.
24/7
Every database, every server is replicated into three different data centers. Different geographical location and different provider. There is no single point of failure. This means, even if one of the servers fails, even if one of the providers goes completely down, your system still works the same way.
Hosting, data security
We use reliable providers who are SOC 1, SOC 2, SOC 3 and ISO 27001 certified. Include AWS, Microsoft Azure, etc. With an individual plan you can choose your provider and replication details. You can even bring your own subscription, your own server.
https://aws.amazon.com/compliance/programs/
https://azure.microsoft.com/en-in/overview/trusted-cloud/compliance/
SSL
All data is encrypted as it moves between our servers and your web browser. The transmission of information between your device and our servers is protected using 256-bit TLS encryption.
Comprehensive DDoS attack protection
Websites, applications and networks are all protected with Cloudflare 30 Tbps global cloud network.
Application security
Every application is protected by a username and password. Only an invited user with a confirmed email and the application owner can access the data in the application. There is no possible way to load the data of an application to which you have no access. We have very finely tuned user rights. You can even adjust these rights on the record level.
Audit data
Every change is tracked and stored in the system. Even if you have a plan with 14 days retention, we store the entire history of your changes. Including who and when changed the data.
Data privacy
Your data is yours. We do not sell any of the information provided to us. We are fully compliant with GDPR. We have a very strong support for implementing GDPR even to your application/data.
If you have any questions about Security at Tabidoo, please contact us.