WebHouse Inc

Security isn't a single yes/no, but WebHouse Inc is SOC 2 Type II compliant. SOC2C verifies its compliance posture and shows how strongly each fact is proven.

WebHouse Inc hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@webhse.com or via a /security page (WebHouse Inc lists a security contact).

WebHouse Inc's subprocessors aren't listed on SOC2C yet. The company can add them so buyers can assess fourth-party risk.

WebHouse Inc's hosting and data-residency details aren't listed on SOC2C yet. The company can add where it hosts (AWS, GCP, Azure) and which data it handles.

WebHouse Inc's trust center is at https://trust.webhse.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.

Yes, we can support SSO via a SAML integration with your Identity Provider.

Our service employs multiple layers of security to ensure the protection of your data. Key security measures include: - Encryption: All data transmitted between you and our servers is encrypted using industry-standard protocols such as TLS (Transport Layer Security) to prevent interception or tampering. We also use encryption at rest to protect your data when stored on our servers. - Two-Factor Authentication (2FA): We offer 2FA for all user accounts, adding an extra layer of security by requiring a second form of verification (such as a code sent to your phone) in addition to your password. - Data Backups: Regular backups of your data are securely stored to prevent loss in case of system failures. - Access Control: We implement strict access control measures, including role-based access, to ensure that only authorized personnel can access your sensitive data.

Yes, we use TLS 1.2 and TLS 1.3 protocols to encrypt all data in transit between your device and our web servers. This ensures that any sensitive information, such as login credentials, personal details, or payment information, is securely encrypted while traveling over the internet, preventing it from being intercepted by malicious actors.

Data stored on our servers is encrypted using AES-256 (Advanced Encryption Standard) to ensure that unauthorized users cannot access or read your data. This encryption is applied to all sensitive data, including personal information, account details, and any documents or files you upload to our service.

We implement a multi-layered approach to security to prevent data breaches: - Regular Security Audits: We perform regular security assessments, penetration tests, and vulnerability scans to identify and address potential weaknesses in our system. - Firewalls and Intrusion Detection Systems: Our infrastructure is protected by firewalls and intrusion detection systems (IDS) to monitor suspicious activity. - Security Patches and Updates: We keep systems up to date with the latest patches to address known vulnerabilities. - User Awareness: We educate our users on best practices, such as using strong passwords and being aware of phishing attempts. - Penetration Testing: we leverage independent third-party security organizations to perform a penetration test at least annually.