Keeping Your Data Secure
We do our best to actively provide a strong level of security.
Please note that we're humans though — and that security is an ever-going chasing game, with several high profile websites hacked every year.
Up-To-Date Infrastructure And Patches
We keep our infrastructure updated with scheduled security maintenance updates, as well as applying any patches that are recommended to be rolled out immediately. We rely on a security-minded hosting provider which provides easy-to-apply security updates on all infrastructure components.
Similarly, we patch our application code very quickly when vulnerabilities are discovered. We rely on internal and external tools to audit our app code and behaviour.
Proactive Monitoring
We use redundant, world-wide monitoring services to monitor TeamMood’s infrastructure 24x7x365. Any errors or other abnormalities trigger automatic alarms and we pro-actively work on fixing any issues detected. If we detect issues with your account, we will contact the account owner by email.
TeamMood works with industry leading security firms to perform annual network and and application layer penetration tests.
Protection Against Data Loss
We make daily backups of TeamMood's database as well as regular full images (snapshots) of TeamMood's servers.
The backups are saved encrypted and regularly tested for integrity.
We have the required infrastructure to rebuild a fully running service based on those backups very quickly.
Your Credit Card Data Is Safe
We do not store your billing information on our servers.
Your credit card data is directly and securely submitted to a leading, full PCI-compliant payment gateway provider (Stripe), using their JavaScript API.
Certifications
ISO/IEC 27001:2017
ISO 27001 is the leading international standard focused on information security risk management. The certification demonstrates the company's commitment to properly manage information security risk and continuously improve the product and service to meet industry requirements.
The team underwent an extensive company-wide auditing process and concluded with the mandatory ISO 27001 stage 1 and stage 2 audits.
Bug Bounty Program
We run a bug bounty programme so that security researchers can be rewarded for vulnerabilities they find.
Special thanks to:
- Adam T.
- Clifford T.
- John M.M.
Our Bug Bounty program is closed for now.
Questions?
Please email us at security@teammood.com.