Skip to content

Security practices at RecurPost

Overview

At RecurPost, protecting our user’s data is our highest priority.
Our security practices are explained in this article. However, if you still have any questions please do not hesitate to contact us.

Infrastructure Security

RecurPost services are built on primary Amazon web services. We use Microsoft Azure cloud in part for data redundancy.

Both of the Infrastructure vendors are highly reputable and conform to almost every popular security protocol out there. You can read more about AWS security here: https://aws.amazon.com/security/. You can read more about AWS compliance here: https://aws.amazon.com/compliance/programs/. You can read more about Azure security here: https://learn.microsoft.com/en-us/azure/security/fundamentals/overview

Network Level Access and Security

Our infrastructure is secured with multi-level security. It might help to mention that we were audited by a third-party security firm hired by Facebook to make sure that the Facebook user data that we collect is actually stored in compliance with their guidelines. They reviewed our security and found it to be adequate.

Data Level Security

Service Level Agreement

While we do not offer any guarantees on our uptime, we try to maintain 100% uptime for RecurPost.

Backup and Recovery

We perform daily backups on our database and these backups are stored with the same encryption at rest protocols.

Access to Code

All RecurPost applications are built by our in-house developer

Development Best Practices

We constantly upgrade our operating systems and code to the latest stable versions to keep our social media scheduler above the edge. We regularly update our dependencies and make sure none of them has known vulnerabilities.

Application Security Monitoring

Product Security

We have multiple levels of checks in our system to provide security.

Access Control

Every user who can impersonate another user (for troubleshooting and customer support) is provided access control on an as-needed basis.
We store passwords after hashing them using salt.

Internal Users

All of our new hires require access to the platform or user data, beyond what is offered by a simple user account, are trained on the security aspects of our system. We can control who has access to the system and even revoking that access is possible within our system.

Development & Production

We have a multi-stage pipeline to make sure that the code that makes it to the production system has been tested at least thrice. Access to our development and production environments requires a 2FA. Accessing the servers using a terminal requires an SSH key as well as IP level access.

Mandatory 2FA

We enable mandatory 2FA for all employees on all strategic services where it is supported. Before deciding to use another third-party cloud service, we assess both the type of data that would be stored there, as well as that company’s security practices.