At Pave, we understand that security is paramount. Our commitment to protecting the data and privacy of our clients is at the forefront of everything we do. We employ a comprehensive, multi-layered approach to security that ensures all aspects of our operations are safeguarded against threats.

• Encryption: All customer data is encrypted both at rest and in transit to ensure maximum security using advanced encryption protocols such as AES-256
• Access Controls: Access to sensitive data is strictly controlled and monitored. We implement role-based access control and adhere to the principle of least privilege across our systems, including AWS environments and Kafka clusters.
• Data Backups: We employ continuous and periodic backups for all our data stores to prevent data loss. These backups are stored securely in AWS S3 with robust redundancy and recovery procedures in place.

• Firewalls and Intrusion Detection Systems: Our network is protected with state-of-the-art firewalls and intrusion detection systems. AWS’s native security features are fully leveraged to monitor and protect our network traffic.
• Regular Security Audits and Penetration Testing: We conduct frequent security audits to assess and fortify our defenses, utilizing both internal resources and external experts. Penetration tests are conducted periodically to identify and address potential security weaknesses in our systems.

• We adhere to industry security standards and frameworks, including those specific to cloud-based architectures.
• We are SOC-2 Type II certified. We use Vanta to ensure compliance with relevant laws and regulations, including data protection standards like GDPR.

• Regular Training: Our employees receive regular training on the latest security practices, with a strong focus on cloud security and data protection.
• Security Culture: We foster a security-aware culture, encouraging all team members to prioritize and advocate for robust security measures.

• Response Plan: We have a comprehensive incident response plan tailored to our cloud-based infrastructure, ensuring rapid and effective action in the event of a security breach.
• Reporting Mechanisms: Our team is trained to promptly report and escalate security incidents, ensuring swift resolution and minimal impact.

At Pave, we are committed to continuously evolving our security practices. We stay abreast of the latest developments in technology and cybersecurity to ensure our defenses remain robust and effective against emerging threats.

For more information about our security practices please contact us at api@pave.dev