SECURITY STATEMENT

Appuri Security Statement

Last Updated: June 25th

Your trust is our most important asset. All customer data stored by Appuri Inc. (“Appuri,” “we,” or “us”) is protected by rigorous infrastructure and administrative procedures. To achieve the high levels of physical and data protection that today’s businesses require, Appuri maintains a robust and comprehensive multi-level security process as described herein.

Physical Security

The Subscription Service is hosted on AWS. AWS Cloud Security outlines their policy here.

Data Encryption

Appuri uses proven transport layer security (TLS) technology from the most trusted providers to encrypt all data transmissions between your device and our servers. TLS technology is designed to protect your information by establishing trust of our servers through a trusted third party, and then creating a secure channel through which your data can pass to our servers protected from malicious actors. A dedicated firewall provides a strong barrier of network security from the internet and we utilize Amazon’s S3 service to store and serve uploaded files.

User Authentication

Each user in your Appuri environment has a unique user name (i.e., their e-mail address). We offer forms-based authentication (username and password) and Google Authentication to all users of Appuri. Appuri issues a JSON Web Token only to record encrypted authentication information for the duration of a specific session. The session cookie does not include either the user name or password of the user. Appuri does not use cookies to store other confidential user and session information, but instead implements more advanced security methods based on dynamic data and encoded session IDs. All account login attempts are logged.

Operational Management

We have implemented policies and procedures designed to ensure that your data is secure and backed up to multiple physical locations. Our team is continually evaluating potential security threats and implementing updated countermeasures designed to prevent unauthorized access to or unplanned downtime of the Subscription Service. Access to all Appuri production systems and data is limited to authorized members of the Appuri Technical Operations team.

Engagement

If you find a security issue with our products or if you are concerned or suspect that your Appuri account has been compromised, please contact us at security@appuri.com or call us directly at 206-886-0893.

Changes

We may update this Security Statement as we add new security capabilities and make security improvements to our services. We encourage you to periodically review this page for the latest information on our security practices.