Designed around
top security

Infrastructure Security

Meetgeek delivers services using a private virtual network of secured microservices deployed on Amazon Web Services (AWS) cloud platform.

AWS provides a comprehensive list of compliance and regulatory assurances, including SOC 1-3 and ISO 27001.
See more detailed information at AWS compliance and AWS security.

Data & Information Security

All communication (data in transit) is encrypted using TLS, the upgraded technology of SSL.

‍

Customer data (data at rest) is encrypted using Advanced Encryption Standard, while AWS maintains cryptographic encryption keys. Disk storage is similarly encrypted and relies on AWS key management .

Application Security

Application software follows latest security practices such as the ASVS 4.0.2 standard defined by OWASP. Internally, we use CI/CD pipelines including tools like Sonarqube to run security reviews and identify potential issues during the development phase.

‍

We perform regular internal security assessment DAST scans to follow-up with issues that may appear in the later phases of the delivery, using third party tools such as OWASP ZAP

Security Bounty Program

We take security very seriously, and we recognize that no system is perfect. That's why we've created our Security Bounty Program - to encourage and reward responsible security researchers who find and report security vulnerabilities to us.

‍

If you've discovered a security vulnerability in our system, we want to hear about it. Please report any security issues you discover to us via our dedicated email. We will investigate your report promptly and take the necessary steps to fix the issue.