Privacy and GDPR
BoldCreate takes data privacy seriously and works to meet GDPR requirements. The sections below describe how we host, process, test, and back up customer data.
Datacenter Security
BoldCreate is hosted on Google Cloud Platform (GCP). Our infrastructure runs in Google Cloud data centers, which Google secures with its own physical, network, and operational controls. Read more about Google Cloud global infrastructure.
Payment Security
BoldCreate uses a PCI-compliant payment system for encrypting and processing credit card payments. We have partnered with Stripe to securely handle sensitive payment processing data. BoldCreate does not have access to customer credit card data.
Penetration Testing
BoldCreate has well-equipped security specialists and development teams to perform penetration testing. A yearly penetration test is performed to secure our products.
Secure by Design
Every feature update is monitored and governed by a change management policy. The code is screened with active analyzer tools and manually reviewed.
Backup
Data is backed up securely in case you need to regain access to your data and service. Our monitoring system alerts us to any arising problems, and we have dedicated staff to handle any situation.
Monitoring and Alerting
The application and its components are monitored 24/7. Our engineers are immediately notified in the event of a service interruption.
Vulnerability Scans
BoldCreate uses security tools to scan for vulnerabilities. In addition, third-party libraries and tools are monitored and updated frequently, and immediately patched when issues are reported. HostedScan is used to check for vulnerabilities in our websites. Passive testing is conducted to check our web applications for cross-domain misconfigurations, insecure cookies, and vulnerable JavaScript dependencies.
Uptime
Uptime commitments for BoldCreate are defined in the BoldCreate Service Level Agreement (SLA). We notify customers in advance of scheduled maintenance or planned outages.
To learn more about our security practices, refer to our Security Management Report.