Security
Explore how Callgoose approaches secure access, service protection and operational reliability. Use the sections below to navigate the information relevant to this topic.
Introduction
Ensuring the security of our customers' data and implementing robust authentication measures are our topmost concerns.
Encrypted Communications
All communications with Callgoose Web and Mobile applications or APIs are over HTTPS. We also use Force TLS and HTTP Strict Transport Security (HSTS) to ensure that every request is secure. We're proud to share that all our websites, including https://www.callgoose and its micro-websites (subdomains) under callgoose.com, have received an A+ Grade rating from Qualys SSL Labs. Check here for more info added in main page under Enhanced Security
SSO
We employ Google and Microsoft Single Sign-On (SSO) for authentication, while also offering authentication through SAML
Payment gateway
We use Stripe and PayPal for payment gateway. Stripe is the PCI Service Provider Level 1 certified. This is the most stringent level of certification available in the payments industry. Check Stripe security page for more information PayPal is PCI compliant. Check PayPal website for more information.
Data Security
- All systems disks are encrypted in the Operating System level and not in the Cloud provider level.
- All critical and sensitive data is stored in the database in encrypted form.
- Web GUI and Mobile Applications are using regenerative token with time limit to secure your access to our system.
Data Backups
We are running regular backup of all the data and all backups are encrypted and stored in a different place.
Data retention
Personal data retention . Refer to Privacy Policy Other Incident related data retention is as per the Plans. Refer Pricing page for more information.
Infrastructure security
Our Infrastructures are hosted in Linode Akamai, Vultr, fastly Check their website for more info related with security and compliance
High Availability and Redundancy
- Our infrastructures are hosted in a multi-cloud environment to guarantee high availability and redundancy.
- We employ a global load balancer to evenly distribute traffic across our multi-cloud environments.
- Load balancing is implemented for all our web application servers.
- All our other application servers are configured in a redundant mode.
- Our database servers are clustered and operate in a redundant setup.
Systems and Software Security
- We employ our own security protocols, including firewalls, access controls, and other restrictions
- We regularly update the systems and software's with latest version and security update.
Access to infrastructure
Access to our infrastructure is strictly limited to maintainer who require such access to update the systems and softwares for security,performance and other enhancement.
Logging and Monitoring
All logs related with login and others logs from the systems are logged into a centralized logger.
Asset management
All corporate laptops hard disk's are encrypted
Confidentiality Agreements
All employees of Callgoose have executed non-disclosure agreements with the company. It is our policy that employees shall not modify configurations on your account without providing prior notification to you, and in most instances, such modifications will only be implemented at your explicit request. We are committed to proactively communicating any forthcoming system alterations that may impact your usage in any manner.
Change Management
All changes to Callgoose software follow Callgoose's change management process and require testing and approval prior to release to production. Please do not hesitate to reach out to us through the designated Contact Us form. Kindly consult the Responsible Disclosure page for the proper procedure to report a security vulnerability.