Security
Security is a first-class concern at HyreLog. We're building a platform that you can trust with your most critical audit trail data.
Our security practices include (and will expand as we approach launch):
- Encryption in transit: All data transmitted to and from HyreLog is encrypted using TLS 1.3.
- Encryption at rest: All stored data is encrypted using industry-standard encryption.
- Principle of least privilege: Access controls are designed to grant only the minimum permissions necessary.
- Regional data centers: Data is stored in region-specific data centers to meet regulatory and performance requirements.
- Hash-chain integrity: The cryptographic hash-chain ensures that any tampering with audit events is immediately detectable.
- Regular security audits: We plan to conduct regular security assessments and penetration testing.
As we build out the platform, we'll publish more detailed security documentation, including our SOC 2 Type II certification plans, security architecture, and incident response procedures.
If you have security questions or want to report a security issue, please contact us.