InsideGroup
Security
This page gives an overview of the security procedures that we follow building the InsideGroup company and product. It is provided for general information and describes our practices as they stand today; our practices may change as the product and our infrastructure evolve.
Payments
We process payments with Stripe, a fully PCI-compliant service provider (PCI DSS Level 1 Service Provider). InsideGroup does not process or store any payment information.
Infrastructure
We use DigitalOcean to host our technical infrastructure and servers. DigitalOcean maintains the following compliance certifications: SOC 2 Type II, SOC 3 Type II, PCI-DSS, and CSA STAR, and its data center facilities are ISO 27001 certified.
Development Process
We use version control, separate our development and production environments, and review code changes before deployment where appropriate.
We use automated tooling to help identify vulnerabilities in our application code and dependencies. Engineers working on the Services are expected to follow our internal security practices and receive guidance on secure development.
Encryption
Data is encrypted in transit and at rest. We work with DigitalOcean to encrypt our data stored in our database and cached.
Connections to the insidegroup.ai site and API are encrypted using SSL/TLS.
Incident Response
We maintain procedures to identify, investigate, respond to, and remediate security incidents, and we use automated monitoring and alerting to help detect availability, performance, and security issues.
Engineers are responsible for responding to incidents in a timely manner. Where a security incident affects Personal Data that we process on behalf of a customer, we will notify that customer as described in our Data Processing Addendum.
Contact
If you have questions or have found a suspected vulnerability, you can contact us at [email protected].