We are committed to safeguarding your business and customer data through robust security practices, industry-standard technologies, and continuous vigilance.
At UpBuoy, we understand that the data you entrust to us about your routes, your customers, your finances, and your team is critical to your business. Security isn't an afterthought; it's foundational to how we design, build, and operate our platform. We employ a multi-layered approach to protect your information across our applications, infrastructure, and internal processes.
Our commitment includes:
All data transmitted between your devices (web browser, mobile app) and UpBuoy servers is encrypted using industry-standard TLS (Transport Layer Security). Sensitive data stored within our databases, such as passwords and certain integration keys, is encrypted at rest.
UpBuoy leverages leading cloud infrastructure providers (e.g., Amazon Web Services - AWS) known for their high standards of physical security, network security, and operational reliability. This includes measures like firewalls, intrusion detection/prevention systems, and regular security audits of the underlying infrastructure.
When you use UpBuoy Billing, customer payment information (credit card numbers, bank account details) is handled directly by our payment processing partner, Stripe, a certified PCI Level 1 Service Provider (the highest level of security certification). UpBuoy does not store full credit card numbers or bank account details on our servers. We securely process payments using tokenization provided by Stripe.
User passwords are securely stored using industry-standard hashing algorithms. We enforce password complexity requirements and provide secure password reset mechanisms. We strongly recommend users enable multi-factor authentication on their email accounts associated with UpBuoy for added protection. Users are responsible for maintaining the confidentiality of their own passwords.
UpBuoy utilizes role-based access controls (Admin, Tech) to ensure users only have access to the information and features necessary for their job function. Administrators manage user accounts and can grant specific extra privileges to technicians as needed.
We follow secure software development lifecycle practices, including code reviews, vulnerability scanning, and regular updates to address potential security issues in our codebase and third-party libraries.
We perform regular backups of critical platform data to ensure we can recover information in the event of unforeseen incidents.
We have procedures in place to detect, respond to, and mitigate potential security incidents promptly.
While UpBuoy implements strong security measures, protecting your account also depends on you:
If you believe you have discovered a security vulnerability in UpBuoy or have concerns about your account's security, please contact us immediately at [security@upbuoy.com] or via our main Support Channels. We take all reports seriously and will investigate promptly.
The security landscape is always changing. UpBuoy is committed to staying informed about emerging threats and continuously investing in and improving our security practices to protect your valuable business data.
Our payment processing is handled through Stripe, which maintains PCI DSS Level 1 compliance, the highest level of certification available in the payments industry.