Passare System Security
Passare is committed to maintaining data security and utilizes various industry best practices to keep that commitment.
HOW DOES PASSARE KEEP MY INFORMATION SAFE?
- All data is stored in highly secure Amazon Web Services (AWS) data centers, which put strong safeguards in place to help protect customer privacy.
- We force the use of HTTPS certificates when accessing the application, which helps protect users against someone intercepting data as it is transferred between Passare and the end-user's computer.
- An example of how this adds security is a public/open Wi-Fi hotspot - without HTTPS, someone else on the hotspot could potentially intercept all data you send or receive.
- We encrypt critical data – like SSNs, driver’s license number, checking account number, etc. – while it is stored in our database.
- We never store any credit card information on our site.
- We use a code analysis tool (CodeClimate), which looks for and flags code that poses potential security concerns.
- Within development, we use a standard peer review process; where every piece of code is reviewed by a developer who did not write it, to look for issues, including any security issues.
- We have a sophisticated Roles and Permissions system; which allows funeral homes to regulate the amount of information that users have access to.
- We restrict access to our internal infrastructure, even for Passare employees.
- One reason why a cloud-based system has exceptional security infrastructure, is that the cost of that infrastructure is spread throughout all the cloud users; who collectively fund a higher-quality system than they could afford individually.
- In the odd and highly unlikely event of a data breach, AWS has several mitigation techniques that are designed to automatically detect and deflect security breaches.
Infrastructure Layer Defenses:
- Amazon Route53 (BP3): Amazon Route 53 is a highly available and scalable domain name system (DNS) service that can be used to direct traffic to the web application. It includes many advanced features like traffic flow, latency-based routing, Geo DNS, health checks, and monitoring. These features allow you us control how the service responds to DNS requests in order to optimize for latency, health, and other considerations.
- Amazon VPC (BP5): Amazon VPC allows us to provision a logically isolated section of the AWS Cloud where we can launch AWS resources in a virtual network that we define. So, we can block certain types of traffic from interacting with our application with certain Access Control Lists – thus reducing a risk of attacks.
ARE THERE OTHER COMPANIES I KNOW OF THAT ARE USING AMAZON WEB SERVICES (AWS)?
WHO DO I CONTACT IF I HAVE QUESTIONS?
Contact firstname.lastname@example.org with any questions about this feature, or call the toll-free support number: 1-800-692-5111.