Security Policy

SmartPOS Solutions takes data security very seriously. We use industry-standard security measures to protect your data from unauthorized access, use, or disclosure. Our security measures include encryption, firewalls, and secure data centers. We also regularly monitor our systems for security vulnerabilities and take immediate action to address any issues that may arise.

Infrastructure

All our infrastructure is within our virtual private cloud (VPC) with production access restricted to operations support staff only.

Security Compliance

We have implemented an Information Security Management System and are committed to protecting your privacy and will never sell or share your personal information to third parties without your consent.

Data Residence & Storage

We store your data in secure data centers located in the United States. Our data centers are equipped with physical security measures such as biometric access controls, surveillance cameras, and 24/7 security guards. We also have strict access controls in place to ensure that only authorized personnel can access your data. Data Services are provided by Google Cloud and Cloudflare. Google Cloud and Cloudflare are GDPR, HIPPA and SOC2 Type II Compliant and maintain strong security measures to protect your data.

For more information about Compliances Refer to Google Cloud Compliance Privacy and CloudFlare Compliance.

We maintain a strict privacy policy to prevent unauthorized access or disclosure of customer information.

Vulnerability Management

We conduct regular system vulnerability assessments and employ internal security controls to identify and mitigate potential security risks. Our Vulnerability Disclosure Program enables customers and the technical community to report any security vulnerabilities, allowing us to proactively address them.

Incident Management

Our comprehensive incident management process ensures swift responses to any security events that may impact the integrity or availability of the SmartPos Solutions platform and the stored data. Customer-impacting events receive the highest priority.

Data Backups

We store SmartPos Solutions data across multiple databases and file stores. Regular backups are performed, and full backups are completed monthly.

Security Awareness

Security Awareness Policies: We enforce comprehensive security policies for all employees and contractors with access to SmartPos Solutions information assets. These policies cover areas such as two-factor authentication, password protection, personal firewalls, and the use of secured devices and networks. All employees receive security training during the orientation and onboarding process to ensure their understanding of our commitment to keeping customer information safe and secure.