Security & Infrastructure
Your data security is our highest priority
Enterprise-Grade Security
Arboracle is built on a foundation of security best practices and industry-leading infrastructure. We employ multiple layers of security to ensure your business data remains safe, private, and always available.
Data Encryption
Encryption in Transit
All data transmitted between your browser and our servers is encrypted using TLS 1.3 (Transport Layer Security), the same technology used by banks and financial institutions.
Encryption at Rest
Your data is encrypted at rest using AES-256 encryption, a military-grade standard. This means your data is protected even if physical storage media were compromised.
Infrastructure & Hosting
Powered by AWS
Arboracle is hosted on Amazon Web Services (AWS), one of the world's most secure and reliable cloud platforms, with data centers certified to the highest security standards.
Geographic Redundancy
Your data is automatically replicated across multiple geographically distributed data centers, ensuring availability even in the event of a regional outage.
Automated Backups
We perform continuous automated backups of your data. In the unlikely event of data loss, we can restore your information quickly.
Authentication & Access Control
- Secure Authentication: OAuth 2.0 integration with Google for secure, passwordless login
- Role-Based Access Control (RBAC): Granular permissions ensure users only access data they're authorized to see
- Row-Level Security: Database-level security policies prevent unauthorized data access
- Session Management: Automatic session expiration and secure token handling
Payment Security
All payment processing is handled by Stripe, a PCI-DSS Level 1 certified payment processor. This is the highest level of certification available in the payments industry.
We never store your credit card information on our servers. Payment details are securely tokenized and stored exclusively by Stripe.
Monitoring & Incident Response
- 24/7 System Monitoring: Automated alerts for any unusual activity or potential security threats
- Audit Logs: Comprehensive logging of all access and changes to your data
- Incident Response Plan: Established procedures to quickly address and resolve security incidents
- Regular Security Audits: Periodic reviews of our security practices and infrastructure
Continuous Security Updates
We continuously monitor for security vulnerabilities and apply updates promptly. Our infrastructure is regularly patched to protect against emerging threats.
Compliance & Standards
Arboracle is designed with compliance in mind:
- GDPR Ready: Data privacy controls to support GDPR compliance
- SOC 2 Type II (In Progress): We are working toward SOC 2 Type II certification
- Data Residency: Option to specify data storage location (coming soon for Enterprise)
Your Security Responsibilities
While we provide robust security, you also play a crucial role:
- Keep your login credentials confidential
- Use strong, unique passwords
- Don't share your account access with unauthorized users
- Report any suspicious activity immediately
- Keep your devices and browsers up to date
Security Questions or Concerns?
If you have security questions or need to report a vulnerability, please contact our security team:
Email: [email protected]
For general privacy questions, see our Privacy Policy.