Bitband Security Policy
This document describes Bitband’s security policy. The purpose of this document is to provide Bitband customers with information on how we approach security and security policies.
Our code is stored using a Git repo and we follow the release management process similar to: https://nvie.com/posts/a-successful-git-branching-model/https://nvie.com/posts/a-successful-git-branching-model/
We rely on the audits provided by AWS which include audits for the following designations: ISO 27001, 27017, and 27018 Certification SOC1, 2 and 3
The AWS framework we use is accredited for ISO 27001, 27017, and 27018
We routinely code review our apps before we release to production, We also particpate in a BugCrowd program for our software.
We rely on the AWS framework which is hosted at Amazon. The backup and redundancy mechanisms of AWS are described here: https://aws.amazon.com/compliance/data-center/controls/
Bitband participates in the Atlassian self assessment program. Details of this can be found at: https://developer.atlassian.com/platform/marketplace/security-self-assessment-program/
Last modified 8mo ago