Enterprise-Grade Security
We take the protection of your agency and client data seriously. Our infrastructure is built with security-first principles, ensuring rigorous compliance and data integrity at every level.
Encryption Everywhere
At Rest: All database volumes and stored assets are encrypted at rest using industry-standard AES-256 encryption. We utilize robust key management practices with automatic key rotation.
In Transit: Communications between you and Flivara, as well as internal service communications, are protected via modern TLS 1.3 protocol. HTTP Strict Transport Security (HSTS) is enforced globally.
Reliability & Backups
Redundancy: Our infrastructure is geographically distributed across multiple availability zones, ensuring high availability and fault tolerance.
Backups: We perform automated database backups continuously. Point-in-time recovery is available with backups retained across redundant storage for a full 30-day period. Restore protocols are tested quarterly.
Secure Token Isolation (PCI Compliance)
We integrate with Stripe Connect for all payment processing. Sensitive payment data (such as credit card numbers) never touches our core infrastructure. Instead, we use secure token isolation to interact with billing accounts, ensuring full PCI DSS compliance while keeping your financial transactions completely secure.
Frequently Asked Questions
Is my data encrypted?
Yes, all data is encrypted both at rest using AES-256 encryption standards and in transit via TLS 1.3 protocol with HSTS enforcement.
Is Flivara SOC 2 compliant?
Yes, Flivara maintains SOC 2 Type II compliance to ensure the highest standards of security, availability, and confidentiality.
Are payment details secure?
We use Stripe Connect for secure token isolation. Payment data never touches our core application servers, maintaining strict PCI compliance.
How often is data backed up?
We perform automated, geographically redundant database backups daily, with point-in-time recovery capabilities retained for 30 days.
Security Reporting & Contact
If you have discovered a vulnerability or have any security-related questions, we want to hear from you immediately. We practice responsible disclosure.
Contact security@flivara.com