SECURITY & COMPLIANCE
We take your security seriously
Our Commitment to Security
At Repsy, ensuring the security and compliance of our systems and user data is one of our top priorities. We employ industry-standard measures to protect your information and maintain trust at all times.
Our security practices are continuously monitored and improved to keep pace with emerging threats and regulatory requirements.
Infrastructure Security
Our platform is hosted on secure, compliant cloud infrastructure providers. All data is encrypted both at rest and in transit using strong encryption protocols such as TLS 1.2+ and AES-256.
We regularly perform vulnerability assessments and security audits to ensure system integrity and minimize risk.
Application Security
We apply secure development practices, including code reviews, automated testing, and continuous integration pipelines with security scanning tools. Our engineering team follows the OWASP Top 10 guidelines to mitigate common vulnerabilities.
User authentication is handled securely with OAuth2, JWT tokens, and optional multi-factor authentication (MFA).
Data Privacy & Protection
We are fully committed to protecting personal data in accordance with data protection regulations such as the GDPR and CCPA. Access to user data is restricted and monitored using role-based access control (RBAC).
We do not sell or share user data with third parties unless required by law or explicitly authorized by the user.
Compliance Standards
Repsy is aligned with industry best practices and standards. We aim to maintain compliance with relevant frameworks such as ISO 27001, SOC 2, and GDPR.
Our third-party service providers are carefully selected based on their compliance certifications and security standards.
Incident Response
In the event of a security incident, we have a dedicated incident response plan in place. Our team works swiftly to contain, investigate, and remediate any issues while communicating transparently with affected parties.
If you notice any security vulnerabilities or have concerns, please contact our security team immediately at [email protected].
Continuous Improvement
Security is not a one-time effort but a continuous journey. We actively invest in training, tooling, and external audits to keep our security posture strong and up-to-date.
We welcome feedback and collaboration from the community to help us improve and stay ahead of potential threats.
Contact
For questions regarding our security and compliance practices, or to report a security concern, please email us at [email protected].