Data Security

Access Monitoring

Administrative access to our infrastructure is only available by VPN and SSH Keys and all accesses are logged.

Backups

Our backup strategy executes daily full backups, allowing for a fast recovery time in a disater recovery scenario.

Data Erasure

We provide a self-service option to delete customer data and we will ensure that the data is erased within a set timefreme.

We maintain policies and procedures regarding the deletion of Customer Data, taking into account available technology, so that Customer Data cannot be practicably read or reconstructed. (TODO)

Encription-at-rest

We encrypt data at rest at the storage media with AES256 (TODO)

Encription-in-transit

We encrypt data in transit using TLS or VPNs.

Physical Security

meritboost is a cloud-native system. We rely on cloud service providers to provide physical data center security. We review evidence, such as ISO or SOC 2 reports, annually to verify controls are in place and continue to be effective.