Security

At BidGenie, the security of your data is a core priority. This Security overview describes our current technical and organizational measures. It is intended to provide high-level information and does not modify or limit any commitments in our Terms of Service or Privacy Policy.

1. Infrastructure and Network Security

• Cloud hosting: The Service is hosted with reputable cloud providers that maintain industry-standard security certifications.
• Network controls: Access to production systems is restricted to authorized personnel and protected by network-level controls.

2. Data Protection

• Encryption in transit: Data is encrypted in transit using HTTPS/TLS.
• Encryption at rest: Customer data is stored using encrypted storage provided by our infrastructure providers.
• Backups: We maintain regular backups of production data for business continuity and disaster recovery purposes.

3. Application Security

• Secure development practices: We follow secure coding practices and aim to review changes for security impact.
• Authentication and authorization: Access controls are designed so that users can only access data associated with their organization and permissions.

4. Access Management

• Least privilege: Access to production systems is limited to personnel who require it for their role.
• Administrative controls: Administrative access is protected by strong authentication practices and is logged where feasible.

5. Monitoring and Incident Response

• Monitoring: We monitor the Service for availability and anomalous behavior where feasible.
• Incident response: We investigate security incidents and, where required by law, notify affected customers and regulators.

6. Responsible Disclosure

We welcome reports from security researchers and users who identify potential vulnerabilities. If you believe you have discovered a security issue, please contact us at security@bidgenie.com with sufficient detail to help us investigate. We ask that you do not publicly disclose the issue until we have had a reasonable opportunity to address it.

7. Questions

If you have questions about BidGenie's security practices, please contact us at security@bidgenie.com.