Security at Badger Maps
Badger protects your customer and field data at every layer, from the infrastructure to the app in your reps' hands.
Compliance you can count on.
The standards your security and procurement teams check first.
-
Coming soon
SOC 2 Type II
Independent audit of our security controls.
-
Compliant
GDPR compliant
Meets EU data protection requirements.
-
Compliant
HIPAA compliant
Built to protect health information.
-
Qualified
AWS Qualified Software
Passes and maintains the AWS Foundational Technical Review.
Enterprise SSO, built in.
Your reps sign in with the identity provider your company already uses, and IT controls access from one place.
-
One login for reps
No extra passwords to create, remember or reset.
-
Automatic provisioning with SCIM
Add and remove users in your identity provider, and Badger follows.
-
Access ends when employment does
Offboarding in one place means no lingering accounts.
Built on AWS.
All customer data is stored on Amazon Web Services, one of the most trusted cloud platforms in the world.
-
All customer data hosted and stored on AWS
-
AWS Qualified Software provider
-
Ongoing AWS Foundational Technical Review
AWS infrastructure is certified for ISO 27001, SOC 1, SOC 2, PCI DSS Level 1, FISMA Moderate and SOX. These certifications belong to AWS.
Your data, encrypted and backed up.
We employ strong encryption practices to safeguard customer data:
- All data in transit and user sessions are encrypted with HTTPS and SSL/TLS
- Daily backups to Amazon S3, encrypted at rest with AES-256
- Backups kept up to 12 months, then purged automatically
- Compliant with HIPAA, GDPR and 42 CFR Part 2
- Passwords hashed and salted with PBKDF2 and SHA-256
The right people, and only the right people.
Badger Maps enforces strong security measures across our application to protect user accounts and data:
- All user sessions are encrypted using HTTPS with SSL/TLS
- Single sign-on (SSO) with SCIM user provisioning
- Password complexity requirements
- Brute-force protection with rate limiting and temporary lockouts
- Encrypted sessions that expire after 90 days of inactivity
Watched around the clock. Handled fast.
We regularly test and audit our application for vulnerabilities and follow secure development lifecycle (SDLC) practices to minimize risk.
- Continuous monitoring of health, performance, error rates and scalability
- Immediate triage when an incident is reported
- Escalation to Engineering by severity
- Customers kept informed until resolution
Questions from your security team?
Our team can walk your IT and procurement teams through how Badger protects your data.