Security & Compliance
How We Protect Your Data
We use several layers of safeguards designed to keep your data accessible only to authorized users.
Encryption
Data is encrypted in transit using HTTPS, and our primary database is encrypted at rest. Selected sensitive fields receive additional application-level encryption.
Access Controls
Role-based permissions and tenant isolation limit each user to the data their organization and role allow.
Secure Infrastructure
Hosted on managed cloud infrastructure, with the production database on a private network that is not publicly accessible.
Activity Logging
Authentication activity and selected security-relevant events are logged.
Security Alerting
Automated alerts for selected authentication events, such as repeated sign-in failures.
Secure Development
Automated secret scanning, dependency vulnerability scanning, and static security analysis run on code changes.
Secure Infrastructure
Private Database Network
The production database is not reachable from the public internet and requires encrypted connections
Automated Backups
Automated database backups support recovery from data loss
Bot Protection
Account sign-up is protected by automated bot detection
Our Security Practices
Data Encryption
Data transmitted between your browser or mobile device and our servers is encrypted using HTTPS. Our primary database is encrypted at rest. Particularly sensitive fields, such as social insurance numbers and connected-account credentials, receive additional application-level encryption.
Access Management
Access to customer data is controlled by role-based permissions and separated by organization, so users see only the data their organization and role allow. Changing a password signs the account out of existing sessions.
Security Monitoring
We log authentication activity and use automated alerts for selected security events, such as repeated sign-in failures, so that our team can investigate.
Incident Response
If we become aware of a security incident affecting customer data, we will investigate, take steps to contain it, and notify affected customers and authorities as required by applicable law.
Third-Party Security
We use established service providers for hosting, storage, communications, and other functions needed to operate the Service. Our Privacy Policy describes the categories of providers we use.
Responsible Disclosure
We welcome reports of security vulnerabilities. If you believe you've discovered a security issue, please contact us.
Security Contact: admin1@mydispatchhub.com
Please do not publicly disclose security vulnerabilities until we've had a chance to address them. We review every report and will respond as promptly as we can.
Questions About Security?
Our team is happy to answer any questions about our security practices and compliance.