Security
We take our systems' security seriously, and we value input from the security community. If you've discovered a vulnerability, we appreciate your help in disclosing it to us.
Last updated: February 1, 2024
At Vasco, we understand the importance of trust, especially when it involves the security of your data. Our commitment to safeguarding your information is at the core of our operations, ensuring that you can scale your business with confidence and predictability.
Our Trust Center holds our SOC 2 report and the current subprocessor list.
Data Security at Vasco
Our approach to security is designed with the dual goals of protecting your data and fostering innovation within your teams. We believe in transparency and are dedicated to sharing our practices that keep your data secure, as well as our continuous efforts to enhance data security.
For detailed information on our privacy practices, please visit our Privacy Policy.
Reporting Security Vulnerabilities
We consider the security of our systems a top priority. However, no system can be entirely free of security vulnerabilities. If you discover a vulnerability in any of our services, please help us by reporting it to us through security@vasco.app.
For general inquiries or further information, feel free to reach out at security@vasco.app.
Our Security Practices
Data Storage and Encryption
- We minimize data storage to only what is necessary for account access, integration with third-party tools, and workflow debugging.
- All data transmitted to Vasco is encrypted in transit. We enforce TLS/SSL protocols for all our workflow and application endpoints.
Monitoring and Response
- Our infrastructure and the Vasco platform are monitored continuously, with audit trails to support security analysis and to audit access across our stack.
- Vasco employs advanced monitoring and alerting systems for security incidents and system health. Our engineering team is on call 24/7 to respond promptly to any issues.
Access and Authentication
- We implement strong password policies and regular permission audits for all third-party software accounts to mitigate unauthorized access risks. Shared logins are discouraged; however, when necessary, we utilize secure tools like 1Password for teams to manage access.
Deployment and Automation
- Our deployment processes are automated, allowing us to roll out updates or security patches quickly, often multiple times a week.
Incident Management
- Vasco has a structured incident response plan to address any security issues effectively, minimizing potential impacts on our customers and their data.