Enterprise-grade security
Layered security measures designed to protect venue data.
BistroBee policies
Security
How we keep your data safe and secure.
Data encryption
Data encrypted in transit and at rest using industry-standard protocols.
Access controls
Granular permissions and role-based access controls for venue teams.
Secure infrastructure
Cloud infrastructure with monitoring and security assessment practices.
SSO integration
Single sign-on support with identity providers.
Compliance
Security and privacy standards described in the policy below.
Data Protection
We take data protection seriously and implement comprehensive measures to ensure your information remains secure and private.
Encryption
- All data is encrypted in transit using TLS 1.3
- Data at rest is encrypted using AES-256 encryption
- Encryption keys are managed using industry best practices
Access Controls
- Multi-factor authentication (MFA) available for all accounts
- Role-based access controls with granular permissions
- Regular access reviews and automated deprovisioning
Infrastructure Security
Our platform is built on secure, enterprise-grade infrastructure with multiple layers of protection.
Cloud Security
- Hosted on SOC 2 compliant cloud infrastructure
- Regular security assessments and penetration testing
- 24/7 monitoring and incident response
Network Security
- Web Application Firewall (WAF) protection
- DDoS protection and rate limiting
- Network segmentation and isolation
Compliance
We maintain compliance with major security and privacy standards:
- SOC 2 Type II certification
- GDPR compliance for EU users
- CCPA compliance for California residents
- ISO 27001 security management standards
Incident Response
We have established procedures for detecting, responding to, and recovering from security incidents.
Monitoring
- 24/7 security monitoring and alerting
- Automated threat detection and response
- Regular security audits and assessments
Response Process
- Immediate containment and assessment
- Transparent communication with affected users
- Post-incident analysis and improvements
Employee Security
Our team follows strict security protocols:
- Background checks for all employees
- Regular security training and awareness programs
- Principle of least privilege access
- Secure development practices and code reviews
Data Backup and Recovery
We maintain robust backup and disaster recovery procedures to ensure business continuity and data availability.
Security Contact
If you have security concerns or wish to report a vulnerability, please contact our security team at security@bistrobee.com.