At Institution, trust is the foundation of our relationship with you. We are deeply committed to protecting your data and securing our platform against emerging threats. This page provides an overview of the security measures we have implemented to ensure your information is always handled with the highest level of care and protection.
Our Commitment to Security
We embed security into every layer of our organization—from our infrastructure and product development to our company culture and internal processes. Our security program is designed to protect the confidentiality, integrity, and availability of your data.
Data Encryption
Protecting your data is our top priority. We use industry-standard encryption protocols to secure your information at all times.
- Encryption in Transit: All data transferred between you and our servers is encrypted using Transport Layer Security (TLS) 1.2 or higher. This ensures that your data is protected from eavesdropping or tampering as it travels over the internet.
- Encryption at Rest: All sensitive customer data stored on our servers is encrypted using AES-256, one of the strongest block ciphers available. This includes database records, files, and backups.
Platform & Infrastructure Security
Our platform is built on a secure and resilient infrastructure, leveraging the best practices of world-class cloud providers.
- Secure Cloud Hosting: Our services are hosted in secure, access-controlled data centers managed by leading cloud providers, which are compliant with a wide range of global security standards.
- Network Protection: We utilize a combination of firewalls, virtual private clouds (VPCs), and network access control lists to isolate and protect our network infrastructure from unauthorized access.
- Vulnerability Management: We conduct regular internal and third-party penetration tests and vulnerability scans to identify and remediate potential security risks in our applications and infrastructure.
Organizational & Application Security
Security is a shared responsibility, and we ensure our team and processes adhere to strict security standards.
- Secure Software Development: Our engineering team follows a Secure Software Development Lifecycle (SDLC). Security is considered at every stage of development, from design and coding to testing and deployment. Code is peer-reviewed and subjected to static and dynamic analysis before release.
- Access Control: We enforce the principle of least privilege, meaning our employees can only access the data and systems required to perform their job functions. Access to sensitive production environments is strictly limited and monitored.
- Employee Training & Awareness: All Institution employees undergo regular security and privacy training to ensure they are aware of current threats and best practices for protecting customer data.
Account Security
We provide features to help you protect your own account from unauthorized access.
- Multi-Factor Authentication (MFA): We strongly recommend and support the use of MFA for all user accounts, adding a critical second layer of security to your login process.
- Suspicious Activity Monitoring: We monitor for unusual or suspicious login patterns and will alert you to potential security threats related to your account.
Compliance
Institution is built to meet and exceed rigorous industry security standards. We are committed to maintaining compliance with key regulations and frameworks relevant to our industry. Our policies and controls are designed with standards like SOC 2 and ISO 27001 in mind.
Responsible Disclosure
We value the work of independent security researchers and believe that responsible disclosure is essential to keeping our users safe. If you believe you have discovered a security vulnerability in our platform, we encourage you to notify us immediately.
Please share the details of any suspected vulnerability with us by emailing security@institutionhq.com. We are committed to working with the security community to validate and respond to all legitimate reports.
Questions?
If you have any questions about our security practices, please do not hesitate to reach out to our security team at security@institutionhq.com.
