At Venture360, protecting your data is our top priority. We use a combination of robust software practices, secure infrastructure, and strict personnel protocols to ensure your information remains safe at all times. Here’s an overview of our security measures:
Software Security
Encryption in Transit: All data transmitted between your browser and Venture360 servers is secured using Secure Sockets Layer (SSL) encryption. SSL certificates are rotated every 2-3 months to maintain the highest level of security.
Passwords: User passwords are encrypted and hashed at rest, ensuring that they are completely unreadable, even internally.
Multi-Factor Authentication (MFA): To further protect your account, MFA is enabled, adding an extra layer of security during the login process.
Infrastructure Security
Venture360 deploys its applications through Heroku, a secure cloud platform owned by Salesforce, leveraging the best in-class practices of their infrastructure.
Heroku and AWS: Heroku’s infrastructure is hosted within Amazon Web Services (AWS) data centers, which adhere to rigorous industry standards. AWS undergoes continuous risk assessments and holds the following certifications:
ISO 27001: Ensuring information security management.
SOC 1 & SOC 2: Covering controls relevant to security, availability, processing integrity, confidentiality, and privacy.
PCI Level 1: The highest level of certification for payment processing.
FISMA Moderate: Compliant with federal government security standards.
Sarbanes-Oxley (SOX): Ensuring accountability and security in financial reporting.
SOC 2 Certification: Venture360 itself is SOC 2 certified, demonstrating our adherence to rigorous security, availability, and confidentiality standards.
Personnel Security
Restricted Access: Only a limited number of employees (1-2 senior engineers) have access to critical databases and servers. This minimizes the risk of unauthorized exposure to your data.
Role-Based Permissions: Employee access is limited strictly to the areas required for their responsibilities. Regular audits ensure compliance with our security protocols.
Why It Matters
Our multi-layered security approach is designed to safeguard your data and ensure compliance with stringent industry standards. From secure software and robust infrastructure to strict personnel controls, we work hard to maintain the trust you place in us.
If you have further questions about our security practices, feel free to reach out to our support team.
Your security is our priority.