At PricingForge, security is our top priority. We understand that you're trusting us with your sensitive business data, and we take that responsibility seriously. This page outlines the comprehensive security measures we've implemented to protect your information.
Infrastructure Security
Cloud Infrastructure
PricingForge is built on industry-leading cloud platforms:
Google Firebase
✓ SOC 2 Type II certified
✓ ISO 27001 compliant
✓ 99.95% uptime SLA
✓ Automatic data replication across multiple regions
Vercel Hosting
✓ Global CDN with edge caching
✓ DDoS protection
✓ Automatic SSL/TLS certificates
✓ Zero-downtime deployments
Data Encryption
Encryption in Transit
TLS 1.3: All data transmitted between your browser and our servers is encrypted using the latest TLS protocol
HTTPS Everywhere: All pages are served over HTTPS with HSTS enabled
Certificate Pinning: Protection against man-in-the-middle attacks
Secure WebSockets: Real-time data syncing uses encrypted connections
Encryption at Rest
AES-256 Encryption: All data stored in our database is encrypted using military-grade encryption
Field-Level Encryption: Sensitive fields (costs, prices, margins) are additionally encrypted
Encrypted Backups: All automated backups are encrypted before storage
Key Management: Encryption keys are managed securely and rotated regularly
Authentication & Access Control
User Authentication
Firebase Authentication: Industry-standard authentication system
Email Verification: Required before full account access
Secure Password Storage: Passwords are hashed using bcrypt with salt
In addition to our automated backups, you can create your own backups anytime through the Dashboard → Backups page. We recommend creating backups before major changes.
Security Monitoring
24/7 Monitoring
Real-Time Alerts: Immediate notification of suspicious activity
Intrusion Detection: Advanced systems to detect unauthorized access
Log Analysis: Comprehensive logging and analysis of all system events
Performance Monitoring: Track system health and performance
Audit Logs: Complete audit trail of all user actions
Incident Response
In the unlikely event of a security incident, we have a comprehensive response plan:
Detection: 24/7 monitoring systems immediately identify incidents
Containment: Rapid isolation of affected systems to prevent spread
Investigation: Forensic analysis to determine scope and impact
Notification: Timely communication to affected users as required by law
Remediation: Fix vulnerabilities and implement additional safeguards
Review: Post-incident analysis to improve security measures
Security Best Practices for Users
While we implement robust security measures, you can help keep your account secure:
✓ Use a strong, unique password (12+ characters with mixed case, numbers, symbols)
✓ Never share your password with others
✓ Log out when using shared or public computers
✓ Keep your email account secure (it's used for password recovery)
✓ Review your audit logs regularly for suspicious activity
✓ Be cautious of phishing emails claiming to be from PricingForge
✓ Create regular backups of critical data
✓ Remove team members who no longer need access
Report a Security Issue
If you discover a security vulnerability, please report it responsibly:
Response Time: We aim to acknowledge security reports within 24 hours
Please do not publicly disclose the vulnerability until we have had a chance to address it. We appreciate responsible disclosure and will credit researchers who help improve our security.
Security Certifications & Compliance
Infrastructure
• SOC 2 Type II (via Firebase)
• ISO 27001 (via Firebase)
• PCI DSS Level 1 (via Stripe)
Privacy
• GDPR Compliant
• CCPA Compliant
• Privacy Shield Framework
Security Questions?
For questions about our security practices or to request additional information: