Your clients trust you with their financials. Here is how we safeguard that data, from the people who handle it to the infrastructure that stores it. Peerview Data has completed SOC 2 Type II.
We have an Information Security Policy that is communicated throughout the organization. It follows the criteria set forth by the SOC 2 framework, an information security auditing procedure created by the American Institute of Certified Public Accountants, and we have completed SOC 2 Type II.
We have completed SOC 2 Type II, and our organization undergoes independent third-party assessments to test our security and compliance controls.
We have clearly defined and documented roles and responsibilities related to our Information Security Policy and the protection of our customers' data. Each security policy must be read and approved by each member of our team.
Employee security awareness training, which covers industry best practices and information security issues like password management, is a requirement for all members of our team.
Before starting employment, every team member must agree to abide by an industry-standard confidentiality agreement.
We perform background checks on all new team members in accordance with local laws.
Only authorized personnel who need it for their jobs have access to critical tools and cloud infrastructure. To safeguard access to cloud services, we have single sign-on (SSO), two-factor authentication (2FA), and strict password policies where available.
We use the principle of least privilege for identity and access management.
We perform quarterly reviews of all Peerview Data members with access to sensitive systems.
All Peerview Data members are required to meet a minimum set of password requirements and complexity.
Our application is hosted with Render, which employs a robust security program with multiple certifications. We use AWS S3 Malware Protection to make sure any file uploads are checked for viruses and malware. For more information, see Render Security.
All of our data is hosted on Render databases and Amazon Web Services (AWS) S3 buckets. These databases are all located in the United States. See AWS Security and Render Security.
Databases are all encrypted at rest.
Our application uses SSL/TLS certificates.
Your clients' data is not used to train the AI.
We perform vulnerability scanning and monitor for threats.
We log and monitor cloud infrastructure.
We use the backup services offered by our data hosting providers in the event of hardware failures. When there are failures that affect users, we have monitoring services to notify our team.
We have protocols in place for dealing with information security incidents that involve customer communication.
We perform risk assessments annually to identify potential threats.
Vendor risks and reviews are performed before authorizing a new vendor.
If you have any questions or concerns, or wish to report a potential security issue, contact us at support@peerviewdata.com.