Security at TheySaid

Encryption

Data is encrypted in transit with TLS 1.2. Data is encrypted at rest with AES.

Continuous Monitoring

Independent third-party penetration, threat, and vulnerability testing.

Data Handling

TheySaid is in full compliance with GDPR and has support for data deletion.

SSO

User access controls with single sign on.

Secure Hosting

TheySaid’s cloud environments are backed by Google Cloud’s security measures.

RBAC

Role-based account access workflows.

Penetration Testing

We perform an independent third-party penetration test at least annually to ensure that the security posture of our services is uncompromised.

Security Awareness Training

Our team must undergo employee security awareness training covering industry standard practices and information security topics such as phishing and password management.

Third-Party Audits

Our organization undergoes independent third-party assessments to test our security controls.

Roles and Responsibilities

Roles and responsibilities related to our information security program and customer data protection are well-defined and documented.

Information Security Program

We have an information security program in place that is communicated throughout the organization. Our information security program follows the criteria set forth by SOC 2 (and ISO 27001 soon).

Continuous Monitoring

We continuously monitor our security and compliance status to ensure no lapses.