AppointmentThing

Security

Add Comment

<ul> </ul> <ul> <li>Features</li> <li>Pricing</li> <li>Help Centerbookmark_border </li> </ul> <ul> <li>Sign In</li> <li>or</li> <li>Sign Up</li> </ul> menu <ul> <li>Features list_alt </li> <li>Pricing attach_money </li> <li>Help Center bookmark_border </li> </ul> <ul> <li>Sign In lock_open </li> </ul> Menu more_horiz <ul> <li> Privacy </li> <li> Privacy Policyadd </li> <li> Cookie Policyadd </li> <li> Supplemental Privacy Notice for CA Residentsadd </li> <li> Data Processing Agreementadd </li> <li> Sub-data Processorsadd </li> </ul> <ul> <li> Service Agreements </li> <li> Terms Of Serviceadd </li> </ul> <ul> <li> Security </li> <li> Securityremove </li> </ul> Security PCI Compliance AppointmentThing.com is provided by AddEvent, Inc. AddEvent uses Stripe as a vendor to handle credit card transactions securely using SSL. Stripe complies with the classification PCI Level 1 Service Provider. AddEvent completes Self Assessment Questionnaires in order to make sure we’re PCI-compliant in accordance with the tools provided by Stripe. AddEvent employs a team responsible for oversight of PCI Compliance. Privacy AddEvent maintains a comprehensive privacy program.  <ul> <li>We do not sell personal information of our customers to third parties.</li> <li>We employ a team handling legal and security concerns focusing on privacy and security issues.</li> <li>You can find our privacy policy at appointmentthing.com/privacy</li> </ul> Hosting Environment Amazon EC2 hosts AddEvent's production systems. The production servers for AppointmentThing.com is located in Ireland. <ul> <li>PCI-DSS Level 1 Service Provider</li> <li>ISO 27001 certified</li> <li>Independently verified and audited</li> <li>SAS-70 Type II and SSAE16</li> <li>Amazon AWS PCI Compliance site</li> </ul> Web and Mobile Application Development AddEvent is committed to designing, building, and maintaining secure systems. <ul> <li>All applications are regularly scanned for common security vulnerabilities.</li> <li>Regular training on Secure Coding Practices is provided. All engineers attend training sessions.</li> <li>No credit card information is stored on any of our servers. The data is hosted solely by our credit card processor Stripe.</li> <li>Use of encryption for transmission of sensitive information is audited by our security team.</li> <li>All applications are primarily developed, tested, deployed, and maintained by a full-time, in-house engineering team.</li> </ul> Encryption AddEvent uses strong encryption methods and key management procedures to ensure your sensitive information is protected. <ul> <li>All credit card information is encrypted with strong industry-standard cryptographic protocols such as AES and TLS while in transit through our systems.</li> <li>AddEvent's website and APIs are accessible via a 256-bit SSL certificate issued by Amazon.</li> <li>Credit card information is never stored after transaction authorization.</li> <li>Access to encryption keys is held by the smallest number of AddEvent employees possible.</li> </ul> Our Organization <ul> <li>All employees are subject to reference, education, and other personal checks. Certain employees are also subject to detailed background checks.</li> <li>AddEvent maintains an information security training program that ensures our employees meet our Privacy Policy.</li> <li>Knowledgeable full-time security personnel are on staff.</li> <li>Require written acknowledgement by employees of their roles and responsibilities with respect to protecting user data and privacy.</li> </ul> Incident Response We record/store a very limited number of PII records. While we don't anticipate there ever being a breach of our systems, we know that no systems is perfectly secure. <ul> <li>In the event of a breach in our systems, we have a detailed Incident Response plan in place. In case of any breach, we aim to send out a report to our users within a week.</li> </ul> Research and Disclosure If you discover a vulnerability in any of AddEvent’s systems, please report it to us first. <ul> <li>Do not attempt to harm AddEvent, its users, or customer's data.</li> <li>Allow reasonable time for AddEvent to resolve the issue before publishing findings publicly.</li> <li>Report details to security@appointmentthing.com.</li> <li>Include full details and steps to reproduce.</li> <li>We love anyone reporting <3. Thank you!</li> </ul> <ul> <li> </li> <li> </li> </ul> More menu Solutions <ul> <li>For you</li> <li>Accountants</li> <li>Cleaners</li> <li>Consultants</li> <li>Contractors</li> <li>Doctors</li> <li>Entrepreneurs</li> <li>Freelancers</li> </ul>   <ul> <li>Manufacturing</li> <li>Personal Trainers</li> <li>Photographers</li> <li>Real Estate Agents</li> <li>Salons</li> <li>Small Businesses</li> <li>Therapists</li> <li>Tutors</li> </ul> Company <ul> <li>About Us</li> <li>Features &amp. Pricing</li> <li>Terms of Service</li> <li>Privacy</li> <li>Security</li> </ul> Resources <ul> <li>Help Center</li> <li>Articles</li> <li>Contact</li> </ul> Carefully crafted by your friends at © 2021 AppointmentThing.com