Data Security Policy
Baseline Data Systems, Inc.
Torrance, CA USA
Data Security Overview
The information you create and enter into the product belongs to you. We do not assume ownership or liability for your data. We do not sell customer lists or share customer information. Your data is stored on servers in physically secure locations and transferred via SSL encryption. Our systems are monitored 24/7 to ensure uptime and data security. Access to resources and client information is restricted to authorized personnel based on job responsibilities.
Physical Security
Our servers are hosted in third-party data centers located in a "disaster-free" zone within the United States, protected by multiple layers of security. The perimeter is reinforced with a crash-rated wall to prevent vehicle penetration. Access to internal areas, including cooling systems, switchboards, and generators, requires both a badge swipe and a personal PIN. Only authorized personnel are permitted entry. Every access point is under 24/7 video surveillance with local and remote monitoring.
The innermost perimeter houses servers and networking equipment, secured by bank vault-rated doors equipped with metal detectors. Entry requires another badge swipe and PIN authentication. These facilities are regularly audited for compliance with local, state, and federal laws and are continuously monitored.
Host Security
Baseline Data Systems actively monitors industry security updates, including vendor announcements and other sources. Critical security patches are tested and deployed promptly. Hosts and services are continuously monitored for integrity and availability. Operations staff review alerts generated by monitoring systems and respond immediately.
Administrative access is strictly limited to authorized users. Individual usernames and passwords are required for all machines and data access. Strong password policies, including complexity and minimum length requirements, are enforced.
User Account Security
Users access their accounts using an Account/User Name (or an email address) and a password selected by the user. Account names are automatically generated by Baseline Data Systems but can be changed upon customer request.
Network Security
All customer data transfers are encrypted using industry-standard SSL protocols.
Software Security
Baseline Data Systems develops all application code within the United States. Any discovered vulnerabilities or security issues are promptly reviewed and addressed.
Backups
Your data is backed up daily and restored to a redundant server. Encrypted backup files are also created daily and periodically destroyed. Upon request and at our discretion, we may restore full or partial data from an older backup for a reasonable fee. Customers do not have direct access to backup files.
Disclaimer
No security measures can guarantee 100% protection at all times. While we take extensive precautions to safeguard your data, Baseline Data Systems does not warrant or guarantee absolute security.