Data Security

Technology

All communications with Rowsie are secure. We employ HSTS to enforce connections over HTTPS using TLS v1.2 or higher for all connections over public networks so you can be sure that your information is safe while in transit.

We employ Microsoft’s Azure platform and the Google Cloud Platform (GCP) to provide various services. Azure holds ISO-9001 and ISO-27001 certifications, among many others. GCP holds the ISO-27001 certification as part of their compliance offerings. We hash all customer passwords before storing them in our systems so that, in the unlikely event of a breach, they cannot be read by hackers. All communication with our servers is encrypted in transit.

We do not handle or store sensitive payment information.

Internal Controls

Access to sensitive information and cryptographic keys is strictly limited to those with a need to know, only. Multi-factor authentication combined with strong password controls are always used for administrative access