Rebrandly utilizes enterprise-grade best practices to protect our customers’ data, and works with independent experts to verify its security, privacy, and compliance controls, and have achieved certification against stringent standards.
SOC 2 Report
We work with an independent auditor (one of the worlds big 4 firms) to maintain a SOC 2 report, which objectively certifies our controls to ensure the continuous security of our customers' data.
Developed by the Assurance Services Executive Committee (ASEC) of the AICPA, the Trust Services Criteria is the set of control criteria to be used when evaluating the suitability of the design and operating effectiveness of controls relevant to the security, availability, or processing integrity of information and systems, or the confidentiality or privacy of the information processed by the systems at an entity, a division, or an operating unit of an entity.
Continuous Security Control Monitoring
Rebrandly uses Drata’s automation platform to continuously monitor 100+ security controls across the organization. Automated alerts and evidence collection allows Rebrandly to confidently prove its security and compliance posture any day of the year while fostering a security-first mindset and culture of compliance across the organization.
Employee Training
Security is a company-wide endeavour. All employees complete an annual security training program and employ best practices when handling customer data.
Penetration Tests
Rebrandly works with industry-leading security firms to perform annual network and application layer penetration tests.
Secure Software Development
Rebrandly utilizes a variety of manual and automatic data security and vulnerability checks throughout the software development lifecycle.
Data Encryption
Data is encrypted both in-transit using TLS and at rest.
Vulnerability Disclosure Program
If you believe you’ve discovered a bug in Rebrandly’s security, please get in touch at alert [@] rebrandly.com. Our security team promptly investigates all reported issues.
NOTES:
- Update Jan 12 2022 - we have completed the SOC2-Type1 attestation and we are currently working for the Type2
See also:
0 Comments