FAQ
How does MetaPulse encrypt data in-transit?
MetaPulse encrypts all data in transit using both HTTPS and TLS v1.2+.
How does MetaPulse encrypt data at rest?
All datastores with customer data are encrypted at rest using AES-256 encryption.
Where are your servers located?
MetaPulse utilizes AWS, and servers are located in US AWS availability zones.
Is data stored in a multi-tenant environment?
MetaPulse utilized a multi-tenant environment with logical segregation of data for each client.
Does MetaPulse have an established Security Team?
MetaPulse maintains a dedicated Security team which focuses on application, network, and system security. We employ a dedicated senior-level information security official, and engage independent third parties to regularly test and audit the security and privacy program. The team is responsible for security and privacy regulatory compliance, education, and incident response.
Does MetaPulse have an established Incident Response Team?
MetaPulse maintains an Incident Response Team which includes members of all vital functions across the business in order to address potential incidents in a timely manner. The Incident Response Team conducts tabletop sessions regularly and maintains a documented and organized process for handling any potential threat to the information on MetaPulse systems, computers, data, or vendor systems.
Does MetaPulse conduct penetration tests?
MetaPulse performs, at minimum, an annual external Penetration Test. All areas of the MetaPulse product and cloud infrastructure are in-scope for these assessments, and source code is fully available to the testers in order to maximize the effectiveness and coverage.
Do you perform regular data backups, and how are they secured?
MetaPulse has automated, scheduled backups that are performed at minimum on a daily basis. Backups are stored in the US, and maintain the same level of data encryption as our primary databases.
Are MetaPulse employees trained on security best practices?
Security and compliance training is conducted upon hire for all employees, and we regularly engage our employees in additional training throughout the year.
If you use third-party services, how do you vet and ensure the security of those vendors?
MetaPulse operates a formal vendor assessment program when considering any third-party service providers. We work with several third-party providers that help us provide our services to customers. We enter into contractual agreements with these partners to obligate them to comply with high levels of confidentiality and best practices in security and privacy, and we regularly review these standards and practices.