We’re committed to keeping your data secure, your private information private, and being transparent about our practices as a business.
We take security and privacy seriously, adhering to enterprise-level security standards that keep your customer data protected.
Health Insurance Portability and Accountability Act.
General Data Protection Regulation
We have a globally distributed infrastructure and security team on-call 24/7. Our team is constantly monitoring security notifications from all 3rd party software libraries and if identified, we immediately apply any relevant security patches as soon as they are released. Our engineers work together with the product teams to ensure that all of Agiled’s code and infrastructure follows a secure development lifecycle process.
All of Agiled’s application and data infrastructure is hosted on Amazon Web Services (AWS), a highly scalable cloud computing platform with end-to-end security and privacy features built in.
Designed with redundancy, fault tolerance and disaster recovery at the forefront, our services are distributed across three separate availability zones (data centers). All our infrastructure is within our virtual private cloud (VPC) with production access restricted to operations support staff only. This allows us to leverage complete firewall protection, private IP addresses and other security features.
For more specific details regarding AWS security, please refer to https://aws.amazon.com/security/.
We strive for a 99.99% uptime across all our products and to support that, we host our monitoring and logging systems outside of AWS and employ a variety of tools to accurately monitor and report on any anomaly that could impact the delivery of our services.
All of our services are deployed in at least three availability zones to mitigate any single data center availability issues. In the event of such an emergency that would prevent AWS from delivering service to any of the availability zones (AZ) in a region, we do not have the ability to retrieve data until service in our AZs is restored.
In the unlikely event that data stored in the Agiled database were to be lost or damaged, we would be able to restore from backup with a loss of data no more than 5 minutes. During this time we would not provide additional contingency plans to delivery data due to the very short nature of the recovery time.
All data is stored in the USA in HIPAA compliant, multi-tenant datastores in Amazon Web Services-controlled data centers, and is protected under a signed BAA with AWS. Only those within Amazon who have a legitimate business need to have such information know the actual location of these data centers, and the data centers themselves are secured with a variety of physical controls to prevent unauthorized access.
All data is transferred using HTTPS SHA-256 with RSA Encryption. We ensure that all default account URL’s have a valid SSL Certificates using a wildcard certificate. We use Let’s Encrypt to automate SLL Certificate creation for all custom domains. This means that all Agiled.app accounts are secured by HTTPS. The result of this is that any data you send in or out of Proejct.co is encrypted via HTTPS.
Through the use of automated and manual analysis, as well as constant security review of 3rd party libraries, we ensure to the best of our abilities that we are delivering products that are free from security defects and that data is processed strictly in compliance with our customer’s instructions. All Agiled web application communications support TLS v1.2, and cannot be viewed by a third party. We enforce the same level of encryption used by banks and financial institutions.
Additionally, we support a number of security focused features to help keep your data safe
Agiled supports TLS encryption on all inbound and outbound email. For an explanation of how email encryption works, we recommend this overview from Google.
We design all services with high availability in mind. Our goal is to deliver 99.99% uptime across all our products. In order to achieve this goal, we follow a number of engineering best practices