Information Storage and Retention

• We keep encrypted backups indefinately, however at any point any information we have on an organisation can be requested to be deleted.
• Each organisation has the option of anonymising their data that is stored in the databases at any time after a Campaign has completed. This will leave a summary of the state of a campaign however individual results will be removed. This however, is up to the organisation to do, we will not automatically anonymise data.

Encryption Policies

• All passwords are hashed with Bcrypt which automatically handles salting. At no point do we see or know a users password. We cannot recover a password. All passwords must be a minimum of 10 characters.
• All backups are encrypted with assymetric 2048 bit encryption
• All HTTP requests are made over SSL using LetsEncrypt certificate authority. Please see https://hook.ee for the certificate encryption standard as this can vary depending on the browser used.
• Any password that has to be used by the organisation is generated by Lastpass password manager and is set to a minimum of 20 characters.

Backups

• Data is backed up every 24 hours and encrypted. Data is encrypted with 2048 bit assymetric encryption keys. Private keys are kept offline and away from any day to day devices.
• When data is needed to be decrypted, it is decrypted offline and processed from there. At no point is a private key stored on any developer or employee device that has a direct internet connection.
• This is the only time a USB key is permitted.
  • USB Key is used to move data from internet connected device to airgapped machine where it is decrypted. The decrypted data is moved back to an internet connected device where it is uploaded over SSH to the database servers.
  • The USB key is formatted at this point to prevent any contamination of malware that may have made it onto the USB key.