Security Overview

Encryption

• In transit: All data is transmitted over HTTPS using TLS 1.2 or higher. No unencrypted HTTP connections are accepted in production.
• At rest: OAuth refresh tokens (Google Drive credentials) are encrypted using AES-256 via AWS Key Management Service (KMS) before being written to the database.
• Database: The production database (Neon Postgres) resides in AWS us-east-1 with encryption at rest enabled by default.

Access Control

• Authentication: User accounts use magic-link email authentication (no passwords stored). Admin accounts are restricted to an explicit allowlist.
• Role-based access: Customer users can only access their own organization's data. Admin users have a separate, restricted interface.
• API authentication: Webhook endpoints authenticate using HMAC-signed API keys (bcrypt-hashed at rest). Keys can be rotated from the customer dashboard at any time.
• Secrets management: All credentials and API keys are managed via Doppler and injected at runtime. No secrets are committed to source code.

Data Isolation

• All customer data is logically isolated at the database layer. Every query is automatically scoped to the authenticated tenant's organization ID via Prisma middleware — cross-tenant data access is structurally prevented.
• The isolation layer is covered by automated integration tests that run on every deployment.

Data Retention and Deletion

• When an account is cancelled, all associated data (filing events, credentials, folder mappings, users) is retained for 90 days and then automatically purged.
• Customers can request an export of their data at any time by contacting security@bridgepointintegration.com.
• The production database has point-in-time recovery (PITR) enabled with a 7-day recovery window (extended to 30 days on the Scale plan).

Incident Response

• Production services are monitored 24/7 via Better Uptime (uptime checks every 1 minute on all three endpoints).
• Application errors are captured and alerted via Sentry with per-tenant tagging.
• Structured logs are shipped to Better Stack for real-time querying and retention.
• In the event of a confirmed security incident, affected customers will be notified within 72 hours.

Subprocessors

The following third-party services process customer data on our behalf:

Compliance Roadmap

SOC 2 Type II certification is targeted for 2027. In the interim, we are happy to complete security questionnaires and provide this documentation to prospective customers.

Contact

For security questions, vulnerability reports, or data requests, contact us at security@bridgepointintegration.com.