Trust Center
Security, privacy, and compliance are foundational to Best Workplace. We implement enterprise-grade controls to protect your organization's data.
Security Principles
Our security architecture is built on defense-in-depth principles with multiple layers of protection.
All data encrypted at rest (AES-256) and in transit (TLS 1.3). Database-level encryption via Supabase/PostgreSQL.
Secure session management with HTTP-only cookies, bcrypt password hashing, and optional MFA support.
PostgreSQL RLS policies enforce tenant isolation at the database layer. Users can only access data within their organization.
Comprehensive audit trails for authentication events, data access, and administrative actions.
Hosted on Vercel's edge network with DDoS protection, WAF, and automatic SSL certificate management.
Role-based access control (RBAC) with granular permissions per application and feature.
Compliance Status
We are committed to achieving and maintaining industry-standard compliance certifications.
SOC 2 Trust Service Criteria
Our controls are mapped to the AICPA Trust Service Criteria for SOC 2 Type II readiness.
Access Control
Role-based permissions with organization-scoped data access
Authentication
Secure login with session management and password policies
Encryption
TLS 1.3 in transit, AES-256 at rest
Vulnerability Management
Regular dependency updates and security patches
Incident Response
Documented incident response procedures
Uptime Monitoring
Real-time monitoring with alerting
Disaster Recovery
Automated backups with point-in-time recovery
Scalability
Auto-scaling infrastructure via Vercel Edge Network
Redundancy
Multi-region deployment with failover
Input Validation
Server-side validation on all API endpoints
Error Handling
Graceful error handling with user-friendly messages
Data Quality
Constraints and validation at database level
Data Classification
Sensitive data identified and protected
Tenant Isolation
Row-Level Security (RLS) enforces organization boundaries
Secure Transmission
All API calls over HTTPS with certificate pinning
Consent Management
User consent captured and tracked
Data Minimization
Only necessary data collected and retained
Right to Deletion
Users can request data deletion
Privacy Policy
Clear privacy policy published and maintained
Infrastructure
Best Workplace is built on enterprise-grade cloud infrastructure with industry-leading security.
Data Handling
We implement strict controls to ensure your data is handled securely throughout its lifecycle.
- AES-256 encryption
- Encrypted backups
- Secure key management
- TLS 1.3 encryption
- HTTPS enforced
- Certificate validation
- Right to deletion
- Secure data purge
- Backup retention policy
Questions About Our Security?
Our security team is available to discuss your specific requirements, provide documentation, or answer questions about our compliance posture.