Security

System overview

Macorva was designed with security in mind. This list provides a snapshot of our security systems and policies. We welcome you to contact us at support@macorva.com for further details.

Encryption

• 256-bit AES at rest data encryption
• TLS 1.2 security during all data transfers
  
  

User security

• All user accounts are salted and hashed
• Macorva exclusively uses a "magic link" login system - requiring email or SMS access to see user data
  
  

Compliance with common standards

• All sensitive data is stored on Heroku, a platform with nearly every industry certification
• Macorva has SOC 2 compliant processes - please email us for our most recent report 
  
  

Logging, backups, and monitoring

• Every data access request is logged for 365 days
• All data is continuously backed up, multiple times per day
• All of our systems are monitored for outages
  
  

Confidentiality

• Macorva requires confidentiality agreements with any vendor who may have access to confidential information
• Macorva performs background checks on all employees