Badger Maps & Your Security

At Badger Maps, protecting our customers’ data is a top priority. Our infrastructure and application are designed with security at every layer, leveraging industry best practices and trusted platforms to ensure data confidentiality, integrity, and availability. For in-depth information about our privacy policy, please visit this link.

Infrastructure Security

Badger Maps is hosted on Amazon Web Services (AWS), a leading cloud provider with a robust security framework. AWS maintains rigorous compliance certifications, including ISO 27001, SOC 1, SOC 2, PCI DSS Level 1, FISMA Moderate, and Sarbanes-Oxley (SOX).

All customer data is stored on AWS and benefits from Amazon’s secure-by-design infrastructure, access controls, and global data center protections. For more information on AWS, please visit their cloud security page here.

Data Protection

We employ strong encryption practices to safeguard customer data:

• All data in transit is protected using HTTPS with SSL/TLS encryption.
• User passwords are hashed and salted using PBKDF2 with a SHA-256 hash function (Advanced Integration).
• Daily data backups are securely stored in Amazon S3, encrypted using AES-256 encryption at rest.
• Backups are retained for up to 12 months, with automatic purging policies to ensure optimal storage hygiene.
• Badger Maps is fully HIPAA compliant.
  

Application Security

Badger Maps enforces strong security measures across our application to protect user accounts and data:

• All user sessions are encrypted using HTTPS with SSL/TLS (Advanced Integration).
• Password complexity requirements ensure that users choose strong credentials resistant to common attacks (Advanced Integration).User passwords are hashed and salted using PBKDF2 with a SHA-256 hash function.
  
• Brute-force protection mechanisms are in place, including rate limiting and temporary account lockouts after repeated failed login attempts (Advanced Integration).
• Session timeouts are configured to automatically expire after 90 days of inactivity.
• We regularly test and audit our application for vulnerabilities and follow secure development lifecycle (SDLC) practices to minimize risk.

Monitoring & Incident Response

We operate a comprehensive monitoring and alerting system to detect and respond to anomalies before they impact customers. Our platform is continuously monitored for performance degradation, error rates, and scalability and system health metrics.

If an incident is reported, our support team initiates triage immediately. Issues are escalated to our Engineering team based on severity, and customers are kept informed until a resolution is delivered.