Security
Last updated: November 1, 2025
At RiskWhisper, we take the security of your data seriously. This page outlines our security practices and measures to protect your information.
Data Encryption
We use industry-standard encryption to protect your data:
- In Transit: All data transmitted between your browser and our servers is encrypted using TLS 1.2 or higher
- At Rest: Your data stored on our servers is encrypted using AES-256 encryption
- Secure Communications: All email communications containing sensitive information are encrypted
Infrastructure Security
Our infrastructure is built with security as a priority:
- Cloud hosting with enterprise-grade security providers
- Regular security patches and updates to all systems
- Firewalls and intrusion detection systems
- DDoS protection and mitigation
- Redundant backups with encrypted storage
Access Controls
We implement strict access controls to protect your data:
- Multi-factor authentication for all team members
- Role-based access control (RBAC) limiting data access to authorized personnel only
- Regular access reviews and audits
- Secure password policies and management
- Immediate revocation of access for departing team members
Data Protection
Your business data is protected through:
- Logical separation of customer data
- Regular automated backups
- Disaster recovery procedures
- Data retention policies in compliance with regulations
- Secure data disposal procedures
Application Security
Our application follows security best practices:
- Regular security testing and vulnerability assessments
- Secure coding practices and code reviews
- Protection against common vulnerabilities (SQL injection, XSS, CSRF)
- Input validation and sanitization
- Session management and timeout policies
Monitoring and Incident Response
We actively monitor our systems and have incident response procedures:
- 24/7 automated security monitoring
- Real-time alerting for suspicious activities
- Incident response team and procedures
- Regular security audits and penetration testing
- Transparent communication in case of security incidents
Compliance
We comply with relevant data protection regulations:
- UK GDPR (General Data Protection Regulation)
- Data Protection Act 2018
- Industry-standard security frameworks
Third-Party Security
When we work with third-party service providers:
- We carefully vet all vendors for security practices
- Data processing agreements are in place
- Regular security assessments of third-party services
- Minimal data sharing based on necessity
Your Role in Security
You can help keep your account secure by:
- Using strong, unique passwords
- Enabling two-factor authentication when available
- Not sharing your account credentials
- Logging out when using shared devices
- Reporting any suspicious activity immediately
- Keeping your contact information up to date
Security Updates
We continuously improve our security measures and will update this page to reflect any significant changes to our security practices.
Questions
If you have questions about our security practices, please contact us at:
Email: hello@riskwhisper.io
RiskWhisper Ltd