Enterprise-grade Security
Your data security is our top priority. We implement industry-leading security measures to protect your applications and information.
Trusted by security-conscious organizations
From startups to Fortune 500 companies, organizations trust GoodTaco with their critical business applications.
Certifications & Compliance
We maintain rigorous compliance standards to meet the requirements of regulated industries.
SOC 2 Type II
Annual audit of security, availability, and confidentiality controls
GDPR Compliant
Full compliance with European data protection regulations
CCPA Compliant
California Consumer Privacy Act compliance
HIPAA Ready
Available for healthcare applications (Enterprise plan)
Security Features
Comprehensive security controls to protect your data at every layer.
Data Protection
- AES-256 encryption at rest
- TLS 1.3 encryption in transit
- Automated daily backups
- Point-in-time recovery
- Geographic redundancy
Access Control
- Role-based access control (RBAC)
- Single sign-on (SSO) support
- Multi-factor authentication (MFA)
- API key management
- Session management
Infrastructure
- AWS-hosted infrastructure
- DDoS protection
- Web application firewall (WAF)
- 99.9% uptime SLA
- 24/7 infrastructure monitoring
Compliance & Audit
- Comprehensive audit logs
- Activity monitoring
- Regular penetration testing
- Vulnerability scanning
- Incident response procedures
Our Security Practices
Secure Development Lifecycle
Security is integrated into every stage of our development process. All code undergoes security review, automated vulnerability scanning, and testing before deployment.
Regular Security Assessments
We conduct regular penetration testing by third-party security firms and maintain a bug bounty program to identify and address vulnerabilities proactively.
Incident Response
Our dedicated security team monitors for threats 24/7. In the event of a security incident, we have established procedures to respond quickly and communicate transparently with affected customers.
Employee Security
All employees undergo background checks and security training. Access to customer data is strictly limited on a need-to-know basis.
Responsible Disclosure
We appreciate the security research community's efforts in helping us keep GoodTaco secure. If you've discovered a potential security vulnerability, please report it responsibly.
Report a Vulnerability
Please email [email protected] with details about the vulnerability. Include:
- Description of the vulnerability
- Steps to reproduce
- Potential impact
- Any suggested fixes
We will acknowledge your report within 24 hours and work with you to understand and address the issue promptly.
Have security questions?
Our security team is happy to discuss your specific requirements and provide additional documentation.
Contact Security Team