Security

Your Data. Our Responsibility.

What you own is private. EstateSpace is built to keep it that way.

Schedule a security review See how we protect your data

Security at every layer

Access, infrastructure, application, and data.

Confidentiality & Privacy

  • Security processes to make sure that customer data is accessed only by those who have permission.
  • Role-based access controls
  • No EstateSpace access to your account without your written authorization, fully logged

Infrastructure Security

  • Infrastructure safeguards that prevent unauthorized access to data through AWS.
  • SOC 2 Type II accredited data centers
  • HTTPS connections with AWS
  • Built in firewalls using AWS VPC

Application Security

  • Built-in security features across web and mobile using Strict Transport Security.
  • All connections are encrypted in transit using HTTPS with TLS
  • Perfect forward secrecy
  • Mobile app 256 bit key encryption
  • OWASP secure

Data Security

  • Industry best practices to prevent data loss from disaster or hardware failure.
  • Industry leading Amazon Web Services in the Cloud
  • Frequent, automated backups
  • 24/7/365 monitoring and threat response

Compliance and Assurance

Our controls are independently examined against recognized security and privacy standards, and our infrastructure partners hold their own attestations.

Infrastructure and Testing

Cloud Infrastructure

  • Data is stored using Amazon Web Services (AWS).
  • Utilizes a securely managed sharded MongoDB cluster
  • Data resides in a dedicated AWS Virtual Private Cloud with encryption at rest and in transit

Penetration Testing

  • Continuous automated vulnerability scanning across the platform
  • Systems are hardened to documented baseline configurations
  • Third-party penetration testing conducted by qualified independent firms

Cloud Security Monitoring

  • Cloud infrastructure security and monitoring is managed by Mission
  • Mission is a Premier Consulting Partner in AWS and the Amazon Partner Network (APN).
  • Mission maintains a SOC 2 Type II attestation

Standards and Frameworks

SOC 2 Type II

  • EstateSpace has completed a SOC 2 Type II examination by an independent CPA firm
  • Tested against the AICPA Trust Services Criteria for Security and Confidentiality
  • Report available to prospective clients under mutual NDA

ISAE 3000

  • EstateSpace's SOC 2 examination was conducted in accordance with ISAE 3000
  • The international assurance standard for engagements other than audits of historical financial information
  • Provides globally recognized assurance for clients and auditors outside the United States

HIPAA

  • EstateSpace supports HIPAA-covered workflows
  • Administrative, technical, and organizational safeguards examined under our SOC 2 Type II
  • Supports the protection of electronic Protected Health Information (ePHI) for covered entities

GDPR

  • EstateSpace supports customer obligations under the GDPR
  • Client data is deleted on written request, with retention governed by documented policy
  • Personal data is encrypted at rest and in transit, with access restricted on a least-privilege basis

Start with a conversation

Every security review begins with a call about your requirements. We put a mutual NDA in place, then share our security documentation.

Schedule a security review