Security & Compliance
Your data security is our top priority. Learn about the measures we take to protect your information.
Encryption
All data is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption. Your project data and personal information are protected with industry-standard encryption protocols.
Authentication
We use secure authentication mechanisms including password hashing with bcrypt and support for multi-factor authentication. Passwords are never stored in plain text.
Infrastructure
Our infrastructure is hosted on secure, compliant cloud platforms with regular security audits, automated backups, and disaster recovery procedures in place.
Access Controls
Row-level security ensures that users can only access their own data and projects they've been explicitly granted access to. All access is logged and monitored.
Security Practices
Regular Security Audits
We conduct regular security audits and vulnerability assessments to identify and address potential security issues before they become problems.
Secure Development
Our development process follows security best practices, including code reviews, automated security testing, and secure coding standards.
Data Backups
Your data is automatically backed up regularly with point-in-time recovery capabilities. Backups are encrypted and stored in secure, geographically distributed locations.
Incident Response
We have a comprehensive incident response plan in place. In the unlikely event of a security incident, we will notify affected users promptly and take immediate action to mitigate any impact.
Payment Security
All payment processing is handled securely through Stripe, a PCI DSS Level 1 certified payment processor. We never store your full credit card information on our servers. All payment data is encrypted and processed according to industry standards.
Compliance
GDPR
We comply with the General Data Protection Regulation (GDPR) and respect your data privacy rights, including the right to access, correct, and delete your data.
Data Residency
Your data is stored in secure data centers with strict access controls and monitoring. We respect data residency requirements where applicable.
Reporting Security Issues
If you discover a security vulnerability or have concerns about our security practices, please report it to us immediately. We take security issues seriously and will respond promptly.
Email: security@forese.ai
Please include as much detail as possible about the issue. We appreciate responsible disclosure and will work with you to address any security concerns.
Security Best Practices for Users
While we work hard to secure your data, you also play an important role in keeping your account safe:
- Use a strong, unique password for your account
- Enable multi-factor authentication when available
- Don't share your account credentials with others
- Log out from shared or public computers
- Be cautious of phishing attempts and suspicious emails
- Keep your browser and operating system updated
- Review your account activity regularly