Commitment to Security
Protecting client data is central to our service. Our security practices address four key areas:
- Authentication – We use secure login protocols, multi-factor authentication for administrative accounts, and strong password policies.
- Data Security – All data is encrypted in transit and at rest. We employ industry-standard encryption (e.g., TLS/HTTPS for data in transit and AES-256 for data at rest). Access to data is limited to authorised personnel with role-based permissions.
- Risk Management – We perform regular vulnerability assessments, penetration testing and security audits. We maintain incident response plans to identify and mitigate threats.
- Compliance – We align our security controls with recognised standards (e.g., SOC 2, ISO 27001). We comply with privacy regulations such as GDPR and CCPA and provide transparency into our practices.
Additional Measures
Access Control
We maintain strict access controls and audit logs; employees undergo background checks and security training.
Infrastructure Security
Data is stored in secure, SOC 2–compliant data centres; we monitor systems continuously and patch vulnerabilities promptly.
Data Backups
We perform regular backups and test restoration procedures.
Breach Notification
In the unlikely event of a data breach, we will notify affected users promptly and cooperate with authorities as required.
Contact and Questions
For security-related inquiries or to report a potential vulnerability, please contact us at support@automatebetter.ai.