Security and Reliability
Single Sign-On, firewalls, encryption, physical security, and redundancy. We take the security of your data seriously.
Single Sign-On, firewalls, encryption, physical security, and redundancy. We take the security of your data seriously.
Bindy uses layered security controls to protect customer information, manage access, monitor infrastructure, and support service recovery.
Every Bindy server is protected by a firewall that monitors traffic on multiple protocols and ports.
Application and data-storing servers reside in private subnets, not the public Internet. They can only be reached from specific hosts, on specific ports.
Access to our servers is granted on a "need to know" basis only ("Principle of Least Privilege") and protected by two-way authentication and cryptographic keys.
Key Management. KMS/Secret Management solutions utilized; no secrets or API keys hardcoded in repositories.
Secure API over HTTPS with auth and rate limiting.
PWA Mobile apps for iOS and Android have mandatory HTTPS with the same security controls as the web application.
Database Multi-Tenancy. Logical isolation verifying customer data cannot cross-contaminate.
Segregation of environments. Staging/Dev environments completely separated from Production with distinct cloud credentials and non-production synthetic data.
Rollback procedures. Documented and tested rollback procedures for production releases.
Monitoring & Alerting. Automated alerts set up for unauthorized access attempts, system downtime, and high resource utilization.
Scheduled formal third-party penetration testing to identify and remedy vulnerabilities such as cross-site scripting, session hijacking, SQL injections, Server-Side Request Forgery and other threats.
Scheduled and on-demand server patching.
Audit logging. Production logs (AWS, application logs, auth logs) centralized in write-once/immutable log repositories.
Publicly accessible status page reporting current platform health.
All data traveling to and from your device is encrypted, always.
All information traveling between your computer, tablet or smartphone and Bindy servers is protected from eavesdroppers with TLS 1.3. The lock icon in your browser indicates that you aren't on a phishing site impersonating Bindy and that your data is secure in transit.
Passwords are salted and hashed with bcrypt in our database. This means no one at Bindy knows your password. If you cannot remember it, you need to change it.
Use Multi-factor authentication (MFA) and further-secure logins from unauthorized access.
Better yet, implement Single Sign-On with Okta, Microsoft Azure, or Google SAML and centralize password management.
Bindy implements continuous data-replication across multiple hosts in multiple availability zones so there is no single point of failure, hardware or otherwise, in the database access layer. Bindy data is imaged and backed up daily to multiple secured sites to ensure that, even in the event of a natural disaster, your data can be quickly restored.
Annual Restore Testing. Documented annual restoration test proving backups can successfully recover data within defined RTO/RPO targets.
Data Retention, Deletion, and Privacy. Bindy retains customer data only for the duration of an active trial or Service Agreement. Upon account termination or trial expiry, all customer data—including inspections, photos, tasks, tickets, forms, site details, and user profiles—is permanently and irreversibly purged from our primary systems. Off-site backups are automatically overwritten and purged in accordance with our standard backup rotation cycle (within 30 days).
The Bindy servers are located at Amazon data-centers, in multiple availability zones, in the United States (bindy.com) and Ireland (euro.bindy.com).
There is no offshoring of infrastructure, storage, or compute capacity on the Bindy platform.
The servers holding and managing your data are protected with physical security controls including perimeter controls such as fencing, walls, security staff, video surveillance, intrusion detection systems, and other electronic means. For more information about Amazon's physical security and compliance, please refer to AWS Compliance Whitepapers.
Bindy servers are distributed across several availability zones (independent data centers) and are elastically load-balanced to avoid single points of network failure and ensure availability under load and quick response times.
All Bindy staff and support are physically located in North America and the Eurozone. There is no offshoring of labor or services on the Bindy platform.
We have mapped our 60+ internal security controls against the Trust Services Criteria. Contact us to request our security package, or to discuss our security roadmap under NDA.
Bindy servers are constantly monitored for uptime using a third-party global monitoring service. See our uptime anytime.