Data Security Policy
Baseline Data Systems, Inc.
Torrance, CA USA
Data Security Overview
The information you create and enter into the product belongs to you. Baseline Data Systems does not assume ownership of customer data and is not responsible for the content stored within customer accounts. We do not sell customer lists or share customer information with unauthorized third parties. Customer data is stored on servers located within physically secure facilities and is transferred using SSL encryption. Our systems are monitored 24 hours a day, 7 days a week, to help maintain uptime, performance, and data security. Access to systems, resources, and customer information is restricted to authorized personnel based on job responsibilities.
Physical Security
Our servers are hosted within third-party data centers located in the United States and designed with multiple layers of physical security protection. Facility perimeters are reinforced using crash-rated barriers designed to prevent unauthorized vehicle access. Access to secured internal areas, including cooling systems, electrical switchboards, and power generators, requires both badge authentication and a personal PIN. Only authorized personnel are permitted entry. All access points are monitored by 24/7 video surveillance with both local and remote monitoring capabilities.
The innermost secured areas house servers and networking equipment and are protected by vault-rated security doors and metal detection systems. Entry into these areas requires an additional badge swipe and PIN authentication. These facilities are regularly audited for compliance with applicable local, state, and federal requirements and are continuously monitored.
Host Security
Baseline Data Systems actively monitors industry security updates, including operating system, hardware vendor, and software security announcements. Critical security patches are tested and deployed as quickly as reasonably possible. Hosts and services are continuously monitored for system integrity and availability. Operations personnel review monitoring alerts and respond promptly when issues are identified.
Administrative access is restricted to authorized personnel only. Individual usernames and passwords are required for all systems and data access. Strong password policies, including minimum length and complexity requirements, are enforced where applicable.
User Account Security
Users access their accounts using an Account/User Name or email address together with a password selected by the user. Account names are initially generated by Baseline Data Systems and may be modified upon customer request.
Network Security
All customer data transfers are encrypted using industry-standard SSL protocols.
Software Security
Baseline Data Systems develops all application code within the United States. Any discovered vulnerabilities or security-related issues are reviewed promptly and addressed as appropriate.
Backups
Customer data is backed up daily and restored to redundant systems for recovery purposes. Encrypted backup files are also created daily and are periodically rotated and destroyed according to internal retention procedures. Upon request and at our discretion, Baseline Data Systems may restore full or partial data from older backups for a reasonable service fee. Customers do not have direct access to backup files.
Disclaimer
No security measures can guarantee complete protection at all times. While Baseline Data Systems takes extensive precautions to safeguard customer data, we do not warrant or guarantee absolute security against all possible threats or unauthorized access.