Trust & Security
How we look after your data.
A plain-language account of where your information lives, how it is protected, and what you can expect from us. If something here matters to your procurement or security review, ask us and we'll answer directly.
- Hosting
- DigitalOcean, New York (NYC1), USA
- In transit
- HTTPS everywhere, with HSTS
- Payments
- Stripe. We never see full card numbers
- Backups
- Nightly, integrity-checked, kept 14 days
What We Do
Security that matches the stakes.
Our software holds strategy work and employee records, so we keep the setup simple, current and documented.
Infrastructure
Our applications run on a dedicated DigitalOcean server in New York, behind an nginx reverse proxy. Applications listen only on the server itself, never directly on the internet.
- Each product runs as its own process
- Applications reachable only through the proxy
- Secrets kept in protected configuration files, never in code
Encryption in transit
Every page and API call is served over HTTPS with certificates from Let's Encrypt. PeopleVantage also sends a strict transport security header, so browsers refuse plain HTTP.
- TLS on every request
- HSTS on PeopleVantage
- Secure, HttpOnly cookies for PeopleVantage sessions
Accounts and passwords
Passwords are never stored. We keep only a salted bcrypt hash, so even we cannot read them.
- bcrypt password hashing in both products
- PeopleVantage: rate-limited sign-in and password reset
- PeopleVantage: reset links are single-use and expire after an hour
Payments
Card payments are handled by Stripe Checkout on Stripe's own pages. Card numbers never reach our servers, and tax is calculated by Stripe Tax.
- Stripe Checkout and Billing Portal
- No card data stored by us
- Signed, verified payment webhooks
Backups
A nightly job takes a consistent snapshot of every application's data, checks it is intact, and keeps 14 days of copies. A failed backup alerts us by email.
- Nightly, integrity-checked snapshots
- 14 days retained
- Failure alerts
E-signature records
Every PeopleVantage signature carries an audit trail: who signed, when, from which IP address and device, and a SHA-256 fingerprint of the exact document they signed.
- Tamper-evident document fingerprint
- Time, IP and device recorded
- Signing links are single-purpose and revocable
Your Data
Clear commitments, in plain language.
Data residency
Our servers are in New York, USA. If your organization needs Canadian data residency, talk to us before you sign up.
You can take it with you
Documents, signed copies and tool outputs can be downloaded at any time as PDF or Word.
Deletion on request
Ask us to delete your account and records and we will, except where the law requires us to keep something.
No selling, no tracking
We don't sell personal information, and this website has no advertising or analytics trackers.
Service providers we use
DigitalOcean (hosting), Stripe (payments), Resend and Google Workspace (email), Cloudflare Turnstile (spam protection on our contact form).
Questions for your security review?
Send them over. We'll answer in writing, specifically, about the product you're evaluating.