Our Services
Security and Compliance
At Tailrec, we take your privacy and security seriously. We carefully select trusted services and apply top-tier security measures to protect your data. Our goal is to exceed your expectations when it comes to how we handle and secure your information. Rest assured, we have strict policies in place. Your privacy is our top priority, and we're committed to keeping your data safe and confidential at all times.
Cloud Hosting
Our infrastructure services and data are hosted exclusively on Amazon Web Services (AWS). All operations are conducted within US facilities.
Encryption and Secure Transmission
All data is securely transmitted over HTTPS/TLS, encrypted both in-transit and at-rest. We employ KMS to encrypt sensitive data, and the keys are automatically rotated to ensure the utmost safety of your information. With our premium plan, we take client-side encryption a step further by extending it to all of your text data, and the encryption keys are regularly rotated.
Service Monitoring
We are dedicated to delivering exceptional availability and performance for our services, catering to our valued customers worldwide.
Authorization and Permissions
Authorized access to customer data is meticulously restricted to personnel with job functions that necessitate it. Furthermore, our robust client-side encryption shields your data against queries within the database.
Secure Authentication
We seamlessly inherit your Slack workspace's authentication settings, including SSO (Single Sign-On) or 2FA (Two-Factor Authentication), providing a seamless and secure authentication experience. Our implementation of OpenID Connect (OIDC) adds an extra layer of security on top of OAuth v2, a widely adopted industry standard.
PCI Compliance
Payments are securely processed through Stripe, our trusted payment processor. We do not store or handle any of your payment information directly. For detailed information regarding Stripe's PCI compliance and security policies, we encourage you to review their official documentation and guidelines.
GDPR-Compliant Data Protection
Our service is designed with strong adherence to GDPR principles, placing a high emphasis on protecting your data privacy and security. With robust safeguards, strict access controls, and transparent practices, we strive to ensure your personal information is handled responsibly. You can trust that we prioritize your data protection and provide you with the necessary tools and controls to manage your privacy preferences.
Data Subject Rights Request
For any deletion requests or updates regarding your data, please reach out to our Data Protection Officer (Hussachai Puripunpinyo) at dpo@tailrec.io. He will assist you promptly and ensure that your requests are handled in accordance with applicable data protection regulations.
