ProcessServers.com is engineered and architected from the ground up with security and data integrity as a top priority.
All requests to the web application are transmitted over a secure HTTPS connection. This ensures the highest level of security, using advanced encryption methods to protect your data, similar to the standards used by financial institutions.
Only authorized individuals can access data. Access to our database is restricted to secure connections and password protected. Users' passwords are stored with bcrypt (1-way salted encryption) and are unrecoverable even in the unlikely event that the database was compromised. Daily database backups are archived in perpetuity and available for restoration if something cataclysmic were to happen. The database is encrypted at rest, so if physical hardware was compromised the data would be unreadable.
Documents uploaded to ProcessServers.com are protected by server-side encryption and private URLs. They are only accessible from an authenticated user request from ProcessServers.com. All uploaded documents are backed up and versioned, so even in the unlikely event that a file gets overwritten, the previous version can be restored. Encryption at rest also protects the data in the event of a physical compromise.
ProcessServers.com is written with Ruby on Rails, a web application framework. Ruby on Rails Security Policy We run the latest version of the language and framework with the most up-to-date security patches available.
Our codebase features a comprehensive test suite that to helps to ensure features function as expected and improvements can be made with confidence. In the software development industry, the technique is referred to as "Test Driven Development (TDD)." It is widely regarded as the most effective way to develop and maintain quality software.
The codebase is version controlled with git and is securely stored in a private repository on Github. Github Security Policy
Application servers are run on Heroku. Heroku's Security Policy
Heroku is built on top of Amazon Web Services. Amazon Web Services Security Center