Security Policy | Bookingo

Our Commitment to Security and Compliance

At Bookingo, we understand that the trust of our customers is paramount. That's why we have made data security and compliance the cornerstones of our platform. We are fully committed to protecting the data entrusted to us, adhering to the highest industry standards, and meeting the rigorous demands of data protection regulations.

Our dedication to security isn't just about adhering to rules; it's about building a platform where every stakeholder—families, staff, and administrators—can operate with complete confidence. Our comprehensive security measures are meticulously designed to protect sensitive information at every level. We're not just meeting industry standards; we're exceeding them to provide an environment where trust is not an option but a guarantee.

Certified and Ready

1. SOC 2 Certified

We have achieved System and Organization Controls 2 (SOC 2) Type II certification, a rigorous auditing procedure that ensures we manage and protect your data according to the highest industry standards.

2. GDPR Ready

Bookingo is fully compliant with the General Data Protection Regulation (GDPR), ensuring that we respect and protect the privacy rights of all individuals, especially those residing in the European Union. Read our Privacy Policy for more information.

What This Means For Your Business

Data Protection: We employ robust encryption methods for data at rest and in transit, ensuring that sensitive information—whether it's personal details of families or confidential business data—is always safeguarded against unauthorized access.
Network Safety: Our network infrastructure is fortified with advanced security protocols, including firewalls, intrusion detection systems, and regular vulnerability assessments, to protect against external threats.
Device Security: Recognizing the varied ways users access our platform, we've ensured that our security measures extend to all devices—be it desktops, tablets, or smartphones—providing a uniformly secure experience across the board.
Corporate Controls: We have stringent internal policies and controls in place, including role-based access controls, regular security training for our staff, and strict data handling procedures, to maintain the integrity and confidentiality of your data.
Alert & Response: Our 24/7 monitoring systems are designed to detect and alert our security team to any potential threats immediately, allowing for swift action to prevent breaches and minimize impact.

Fully Secure and Encrypted

Bookingo uses industry-standard TLS/SSL encryption for all data transmission between your browser and our servers. This means that any information you send or receive is encrypted and cannot be intercepted by third parties.

All sensitive data stored in our databases is encrypted using AES-256 encryption, one of the most secure encryption methods available today. Your data is protected both in transit and at rest.

We regularly conduct penetration testing and security audits to identify and address any potential vulnerabilities before they can be exploited.

We Prioritise Your Security

Regular security assessments and audits
Continuous monitoring and threat detection
Employee security awareness training
Incident response procedures
Secure software development lifecycle
Multi-factor authentication options
Data backup and disaster recovery
Vendor security assessments

Infrastructure & Backup

Bookingo's infrastructure is hosted on Google Cloud Platform (GCP), one of the world's leading cloud service providers. GCP provides enterprise-grade security, reliability, and performance.

Our data is stored in multiple geographically distributed data centers, ensuring high availability and redundancy. In the unlikely event of a data center failure, your data remains safe and accessible.

We perform regular automated backups of all data, with multiple copies stored in secure, geographically separated locations. Our backup and recovery procedures are tested regularly to ensure data can be restored quickly and completely if needed.

EU and GDPR Compliant

As a GDPR-compliant organization, Bookingo ensures that all personal data is processed lawfully, fairly, and transparently. We collect only the data necessary for providing our services and retain it only for as long as needed.

You have the right to access, rectify, erase, restrict processing, and port your personal data. You also have the right to object to certain types of processing and to withdraw consent at any time.

For more information about how we handle your data, please see our Privacy Policy.

Let's Talk Security

If you have any questions about our security practices, compliance certifications, or would like to report a security concern, we're here to help.

Last updated: December 2024