Security

Servers

Better Proposals follows industry best practices and we keep our services up to date with the latest security patches. We use the secure and reliable AWS cloud platform to host our software.

Data storage

Better Proposals stores metadata, document activity, original files, and customer information. All our data is stored in multiple locations and AES256 encrypted both at rest and in transit.

Coding and testing standards

Ensuring our software meets security standards is our top priority. To make sure our programming methods meet industry best practices, we have documented development and QA procedures.

Employee access

Access to all our environments is secured with 2FA. Our employees can only access the information they need to know in order to work effectively.

Payment processing

To protect customer privacy, Better Proposals uses third-party payment processing. We do not store, transmit or process any payment information.

Isolated environments

Better Proposals network segments are logically isolated. This means that processes such as feature development and testing take place on a server isolated from the main platform.

System monitoring

Better Proposals performance metrics and uptime are consistently monitored. Critical alerts are instantly sent to our Development and Cyber Security Teams.

Backups

All Better Proposals databases use Multi-AZ deployment, making our RPO near zero. We also make hourly backups to ensure no data loss happens.

Service levels

We ensure the reliability of our network through automation and backups. In addition to task queues, rolling deployment, load balancing and auto-scaling, our hourly backups are encrypted.

Vulnerability testing

During development and testing stages, our Development Team evaluates application security, including identifying any flaws before it is released to the public. We also conduct regular third-party penetration testing by CREST approved independent testers to check for vulnerabilities.

Data transfer

Better Proposals uses 256-bit SSL security to protect your account. Your documents are private thanks to unique encrypted links that can’t be intercepted or accessed by anyone other than the recipient.

System architecture

Our application is logically isolated, meaning it is divided into independent segments. We implement a virtual private cloud and subnets, and backend resources (e.g. our database) aren’t accessible publicly from the internet. All developments are made on a separate server for maximum protection.