Security at Baseflow

Our Security Approach

At Baseflow, security is not an afterthought—it's embedded in everything we do. From our development practices to our infrastructure choices, we prioritize the protection of your data at every level.

Data Protection

• Encryption: All data is encrypted using AES-256 at rest and TLS 1.3 in transit.
• Key Management: Encryption keys are managed using hardware security modules (HSMs) with regular rotation.
• Data Isolation: Customer data is logically isolated to prevent unauthorized access between accounts.
• Secure Deletion: When you delete data, it is securely purged from our systems.

Application Security

• Secure Development: Our development follows OWASP guidelines and secure coding practices.
• Code Reviews: All code changes undergo peer review and automated security scanning.
• Penetration Testing: Regular third-party penetration tests identify and address vulnerabilities.
• Bug Bounty: We maintain a responsible disclosure program for security researchers.

Authentication & Access

• Multi-Factor Authentication: MFA available for all accounts, required for admin access.
• Single Sign-On: Integration with enterprise identity providers (SAML 2.0, OAuth 2.0).
• Session Management: Automatic session timeout and secure session handling.
• Password Security: Strong password requirements with secure hashing (bcrypt).

Infrastructure Security

• Cloud Infrastructure: Hosted on AWS/GCP with enterprise security certifications.
• Network Security: WAF, DDoS protection, and network segmentation.
• Monitoring: 24/7 security monitoring with automated threat detection.
• Incident Response: Documented incident response procedures with regular drills.

Employee Security

• Background Checks: All employees undergo background verification.
• Security Training: Regular security awareness training for all staff.
• Access Controls: Principle of least privilege for all system access.
• Secure Workstations: Encrypted devices with endpoint protection.