{"id":8259,"date":"2020-06-12T09:34:42","date_gmt":"2020-06-12T08:34:42","guid":{"rendered":"https:\/\/www.prodpad.com\/?page_id=8259"},"modified":"2024-03-26T15:56:48","modified_gmt":"2024-03-26T15:56:48","slug":"security","status":"publish","type":"page","link":"https:\/\/www.prodpad.com\/security\/","title":{"rendered":"Security"},"content":{"rendered":"\n
\n
\n
\n
\n
\n
\n \n Security<\/p>\n <\/div>\n <\/div>\n

Operations & Security<\/h1>\n

Great products come from great ideas. We have the security measures in place to protect your company\u2019s future. Service and security you can trust with ProdPad. <\/p>\n <\/div>\n <\/div>\n

\n
\n \"In\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n<\/section>\n\n\n\n
\n
  • Data Protection<\/a><\/li>\n\n\n\n
  • Layered Protection<\/a><\/li>\n\n\n\n
  • Hosting Protection<\/a><\/li>\n\n\n\n
  • Compliance<\/a><\/li>\n\n\n\n
  • Privacy<\/a><\/li>\n\n\n\n
  • SLAs<\/a><\/li>\n\n\n\n
  • FAQ<\/a><\/li>\n<\/menu><\/div>\n\n\n\n
    \n
    \n
    <\/div>\n\n\n\n
    \n
    \n

    For the deepest understanding of how we keep our customers’ data safe and to view our real-time security and compliance status, visit our Trust & Compliance Center<\/a>.<\/p>\n<\/div>\n<\/div>\n\n\n\n

    <\/div>\n<\/div>\n<\/div><\/section>\n\n\n\n
    \n<\/a>\n\n\n\n
    \n
    \n

    Data Protection<\/h2>\n\n\n\n

    All data entered into ProdPad is encrypted at rest and in transit. We use AWS Key Management Store to manage the encryption at rest using AES-256 keys.<\/p>\n\n\n\n

    All data stores are snapshotted nightly and stored for 30 days. These backups are encrypted. Point-in-time logs complement the nightly snapshots, enabling us to recover data within seconds of a failure and quickly rebuild in another region should it be required.<\/p>\n<\/div>\n\n\n\n

    \n
    \"ProdPad<\/figure>\n<\/div>\n<\/div>\n<\/div><\/section>\n\n\n\n
    \n<\/a>\n\n\n\n
    \n
    \n

    Layered Protection<\/h2>\n\n\n\n

    At ProdPad we layer protections. Firewalls exist at the host, network, and application level. These firewalls have content policies for both inbound and outbound content. Intrusion detection and response systems exist at both the network and host level. Automated vulnerability scans are run regularly (at least once a week) on all levels.<\/p>\n\n\n\n

    Audit logs exist on all levels to support comprehensive compliance and security requirements. All code is statically analyzed and run through automated and manual QA processes.<\/p>\n<\/div>\n\n\n\n

    \n
    \"Layered<\/figure>\n<\/div>\n<\/div>\n<\/div><\/section>\n\n\n\n
    \n<\/a>\n\n\n\n
    \n
    \n

    Hosting Protection<\/h2>\n\n\n\n

    ProdPad is hosted on Amazon Web Services, in the EU (Ireland) region. We benefit from the wealth of experience that AWS has built up over the years on running secure, resilient applications. We follow AWS security best practices.<\/p>\n\n\n\n

    AWS has numerous certifications including ISO 27001, ISO 27017, ISO 27018, and SOC1-3 along with more specialist certifications such as HIPAA, FISMA, NIST, C5, G-Cloud, FISC, IRAP, MTCS Tier 3, and Cyber Essentials Plus.<\/p>\n<\/div>\n\n\n\n

    \n
    \"Hosting<\/figure>\n<\/div>\n<\/div>\n<\/div><\/section>\n\n\n\n
    \n
    \n
    \n<\/a>\n\n\n\n

    Compliance<\/h2>\n\n\n\n

    ProdPad is fully SOC2 (Service Organization Control 2) Type II<\/strong>\u00a0compliant, confirmed by an independent assessment by a certified auditor.<\/p>\n\n\n\n

    To find out more about our compliance and request a copy of the report, visit our\u00a0Trust & Compliance Center<\/a>.\u00a0<\/p>\n\n\n\n

    CreateShift Ltd maintains the Cyber Essentials certification<\/strong> backed by the UK\u2019s National Cyber Security Centre.<\/p>\n\n\n\n

    We are GDPR compliant<\/strong>, and an overview of our Data Processing Agreement is included within our Terms of Service<\/a>. For further details contact hello@prodpad.com<\/a>.<\/p>\n\n\n\n

    We maintain basic PCI compliance<\/strong>. All credit card details are handled by Recurly, Inc. and Stripe, Inc. At no point do we receive or store any credit card details.<\/p>\n\n\n\n

    Compliance is an ongoing process and we will be adding additional certifications in the future.<\/p>\n<\/div>\n\n\n\n

    \n
    \"ProdPad<\/figure>\n<\/div>\n<\/div>\n<\/div><\/section>\n\n\n\n
    \n
    \n
    \n<\/a>\n\n\n\n

    Privacy<\/h2>\n\n\n\n

    We don\u2019t re-sell or re-use your data in any way. While our staff are authorized to view the information in your database and logs when specifically required for troubleshooting, we can\u2019t simply log in and see your data.<\/p>\n\n\n\n

    You can find more information in our Privacy Policy<\/a>.<\/p>\n<\/div>\n\n\n\n

    \n
    \"ProdPad<\/figure>\n<\/div>\n<\/div>\n<\/div><\/section>\n\n\n\n
    \n
    \n
    \n<\/a>\n\n\n\n

    Support and SLAs<\/h2>\n\n\n\n

    ProdPad is based in the UK, so our support team is available to help you during UK business hours. However, we\u2019re a pretty responsive team, so you\u2019ll often find us responding to your requests earlier or later than you\u2019d expect. We also have an active Slack community for active customers, which can be a big help if you just have a question on how to use the system.<\/p>\n\n\n\n

    Our Slack community is moderated by the ProdPad team, and no member is permitted to solicit or spam other members of the community. We are a friendly bunch, so just ask!<\/p>\n\n\n\n

    You can learn more about our Service Level Agreement here<\/a>.<\/p>\n<\/div>\n\n\n\n

    \n
    \"ProdPad<\/figure>\n<\/div>\n<\/div>\n<\/div><\/section>\n\n\n\n
    \n<\/a>\n\n\n\n
    \n
    \n
    \n

    FAQs<\/h2>\n\n\n\n

    Information Security FAQs<\/h3>\n\n\n\n