Security

Your data security is our top priority. Learn about our security practices and how we protect your information.

Our Security Measures

Encryption

All data is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption.

Secure Authentication

Multi-factor authentication support and secure password hashing using bcrypt.

Payment Security

PCI DSS compliant payment processing. We never store your full credit card information.

Access Controls

Role-based access control ensures users only see and modify data they're authorized to access.

Regular Audits

We conduct regular security audits and penetration testing to identify and fix vulnerabilities.

Monitoring & Alerts

24/7 monitoring and automated alerts for suspicious activity or security incidents.

Compliance & Certifications

PCI DSS Compliance

We are PCI DSS Level 1 compliant, the highest level of certification for payment card security. All payment processing is handled through our certified payment processor.

GDPR Compliance

We comply with the General Data Protection Regulation (GDPR) and other applicable data protection laws. We respect your privacy rights and provide tools to manage your data.

SOC 2 Type II

We are working towards SOC 2 Type II certification, which demonstrates our commitment to security, availability, and confidentiality of customer data.

Security Best Practices

While we work hard to keep your data secure, there are steps you can take to further protect your account:

  • Use a strong, unique password for your Splitwaze account
  • Enable two-factor authentication when available
  • Never share your account credentials with others
  • Log out when using shared devices
  • Keep your browser and operating system updated
  • Be cautious of phishing attempts

Security Incident Response

If you discover a security vulnerability or have concerns about the security of your account, please contact us immediately:

Security Team Contact

Email: [email protected]
Response Time: We aim to respond to security reports within 24 hours.

We appreciate responsible disclosure of security vulnerabilities. Please do not publicly disclose vulnerabilities until we have had a chance to address them.

Stay Updated

We regularly update our security practices. This page was last updated on March 1, 2024.