Whole team at apiwatcher takes security of every user’s data very seriously. Firstly, the amount of people who have access to customer’s data is very limited. Additionally, every single member of our team with the access to confidential data goes through our internal training program every quarter of a year. During this training we explain internal policies, necessity of such policies and check compliance with them.
apiwatcher conducts general background checks on all of the employees. Additionally, every employee with access to clients’ data must sign a “Nondisclosure Agreement” regarding confidentiality of user’s information. Finally, we regularly consult and explain our security policy to all of our employees.
The environment that hosts apiwatcher cloud services not only undergoes several independent third party audits on regular basis to provide assurance, but also complies with top certifications like ISO 27001, SOC 2/3, and PCI DSS 3.0.
We regularly do not log every access to your account. This will be able to be easily changed by your request in near future. As of this moment, this feature is still in beta. Shoot us an email at support@apiwatcher, if you are interested in logging access to your Accounts, Projects. We will come with solution that will work for you best.
We absolutely trust our partner, PayPal, to process all the transactions for us. They have a long history of keeping credit card information safe and provide any customer with maximum availability of the service.
apiwatcher supports the latest recommended secure cipher suites and protocols to encrypt all traffic in transit. We monitor the changing cryptographic landscape closely and work promptly to upgrade the service to respond to new cryptographic weaknesses as they are discovered and implement best practices as they evolve, while also balancing the need for compatibility for older clients.
We rely on our partners, for the most part, Google Cloud, which offers us perfect solutions to achieve maximum availability of our services.