Trust Center
Security Practices & Controls
As a cybersecurity firm, we hold our own systems to the standards we recommend to clients. This page summarizes our security practices.
Encryption
Data is encrypted in transit with TLS. Account passwords are hashed with bcrypt, and sessions use signed, short-lived tokens.
Access control
Role-based access separates client, partner, and admin functions. BArecord and its admin console run on fully isolated authentication realms.
Secure infrastructure
Services run on managed cloud infrastructure with network isolation, least-privilege access, and regular patching.
Data minimization
We collect only what is needed to deliver the service, and retain it only as long as necessary.