Where is my data stored at?
Brainyhr.io uses Amazon Web Services (AWS). The data is stored in Germany (Frankfurt), allowing you to meet European regulations as no data is transferred outside the EU and is physically secured by trained and audited Security staff around the clock, 365 days a year (see AWS Security Best Practices).
Application/ Server Security Vulnerability Prevention & Detection
- Application by design includes a number of vulnerability prevention measures that are applied at different stages of the development process
- Application/Code Design and Development
- Role-Based Access Control restricting access to areas of the platform depending on specific application level roles
- Strong session identifier validation mechanisms designed to prevent intrusion on existing sessions or other similar attack attempts
- Session Key/Token Management
- Keys are being changed periodically where encryption is deployed
- Keys are deleted when they are no longer needed to perform a function
- All data inputs and outputs are validated/filtered to protect users and databases from such Cross-site scripting, and other malicious attacks.
- Encrypted passwords for all database connections and the inability to permit a connection from an external source
- SQL code injection prevention by using proper database abstraction models that sanitize the strings that developers include in their queries
- Complete exception handling throughout the code base with logging and review where required. This includes all layers of the stack such as encryption, authentication, user access, API method call logging, etc.
Who owns your data?
Main company account is the owner of your data. We provide security functionality to protect your data. We are not sharing any data with any other organisations. Passwords are never stored in plain text: they are hashed with bcrypt, a one-way algorithm, so nobody, including our team, can read them. Our database is encrypted at rest with AES-256 using AWS Key Management Service. If you would like to wipe your data, please send us a request and it will be removed, no questions asked.
Is the transfer of my data secure?
Brainyhr.io uses only secured connection for data transfer. Your data is transferred with high-grade TLS 1.3 technology.
Is my data backed up
Your data is backed up daily, and backups are encrypted with AES-256.
How is security being tested?
Our infrastructure is regularly scanned for known vulnerabilities with AWS security tools (Amazon Inspector). Security patches take priority over any new features.