Security

Data security

• Customer data is managed and stored using industry-standard database technologies. All sensitive data is encrypted and saved into the database and encryption keys are securely managed. Our applications are ‘HTTPS only’ and all data in transit is encrypted using TLS 1.2 and 1.3. Lower TLS versions are disabled to follow the best security standards.
• Our calendar integrations use secure server to server authentication protocols. Official APIs are always used to read and write for calendar synchronization when the user willingly choose to sync their calendars.

Operational security

• Access to customer data is restricted to Mentornity employees who require it to fulfill their job responsibilities.
• We have a privacy program and comprehensive information security that defines our approach to managing security and privacy.
• We have dedicated security and privacy teams that manage our security and privacy programs and constantly monitor our networks to detect suspicious activity.

Software security

• We follow a Secure Software Development Lifecycle (SDLC) model, which incorporates security and privacy by design, throughout all phases of product development, testing, release, and post release support.
• Our products provide advanced security tools, including two-factor authentication, account lockout, password policies, and session timeout settings, which enable you to further enhance your account security.
• We perform numerous vulnerability tests in order to maintain a high level of product security.
• Our employees are regularly trained on security issues, trends, defensive programming concepts.

Infrastructure security and monitoring

• Our applications are hosted on Amazon AWS, data centers hosted in Europe. They provide the highest level of continual around the clock physical security, including biometrics, intrusion detection systems, and interior and exterior surveillance.
• We regularly update our infrastructure in accordance with recommendations provided by Amazon.