Your Data. Our Responsibility.
Your clients trust you with sensitive information. EstateSpace is built to protect it.
Confidentiality & Privacy
- Security processes to make sure that customer data is accessed only by those who have permission.
- Role-based access controls
- No EstateSpace access to your account without your written authorization, fully logged
Infrastructure Security
- Infrastructure safeguards that prevent unauthorized access to data through AWS.
- SOC 2 Type II accredited data centers
- HTTPS connections with AWS
- Built in firewalls using AWS VPC
Application Security
- Built-in security features across web and mobile using Strict Transport Security.
- All connections are encrypted in transit using HTTPS with TLS
- Perfect forward secrecy
- Mobile app 256 bit key encryption
- OWASP secure
Data Security
- Industry best practices to prevent data loss from disaster or hardware failure.
- Industry leading Amazon Web Services in the Cloud
- Frequent, automated backups
- 24/7/365 monitoring and threat response
Compliance and Assurance
Our controls are independently examined against recognized security and privacy standards, and our infrastructure partners hold their own attestations.
Cloud Infrastructure
- Data is stored using Amazon Web Services (AWS).
- Utilizes a securely managed sharded MongoDB cluster
- Data resides in a dedicated AWS Virtual Private Cloud with encryption at rest and in transit
Penetration Testing
- Continuous automated vulnerability scanning across the platform
- Systems are hardened to documented baseline configurations
- Third-party penetration testing conducted by qualified independent firms
Cloud Security Monitoring
- Cloud infrastructure security and monitoring is managed by Mission
- Mission is a Premier Consulting Partner in AWS and the Amazon Partner Network (APN).
- Mission maintains a SOC 2 Type II attestation
ISAE 3000
- EstateSpace's SOC 2 examination was conducted in accordance with ISAE 3000
- The international assurance standard for engagements other than audits of historical financial information
- Provides globally recognized assurance for clients and auditors outside the United States
SOC 2 Type II
- EstateSpace has completed a SOC 2 Type II examination by an independent CPA firm
- Tested against the AICPA Trust Services Criteria for Security and Confidentiality
- Report available to prospective clients under mutual NDA
HIPAA
- EstateSpace supports HIPAA-covered workflows
- Administrative, technical, and organizational safeguards examined under our SOC 2 Type II
- Supports the protection of electronic Protected Health Information (ePHI) for covered entities
GDPR
- EstateSpace supports customer obligations under the GDPR
- Client data is deleted on written request, with retention governed by documented policy
- Personal data is encrypted at rest and in transit, with access restricted on a least-privilege basis
Request Our Security Brief
Have questions about how we protect your data? Our team is available to walk you through our security infrastructure and compliance.