Your data is your business. We protect it like it's ours.
All data in transit is encrypted using TLS 1.3. Your credentials, financial data, and marketplace connections are never transmitted unencrypted.
We never ask for or store your marketplace passwords. You give our team access through each platform's own user permissions, so you choose what we can do and can remove that access at any time.
Payment information is handled by PCI Level 1 compliant processors. We never directly store payment card data on our servers.
Our team members have granular, role-based permissions. No single person has access to all customer data or accounts.
We conduct quarterly penetration testing and security audits by third-party firms to identify and remediate vulnerabilities.
We maintain a documented incident response plan with defined escalation procedures, tested quarterly and activated immediately upon detection of security events.
All API connections to marketplaces use authenticated, encrypted channels. Rate limiting and anomaly detection prevent abuse.
We meet and exceed industry security standards.
How we keep your information secure at rest and in transit.
Found a security vulnerability? We take it seriously and reward responsible disclosure.
If you discover a security vulnerability, please email security@myportflow.com with details. Do not publicly disclose the vulnerability until we've had time to respond and issue a fix. We will acknowledge receipt within 48 hours and provide a timeline for remediation.