Your data security is important to us

Application Security

• Crossfire’s web applications use encrypted communication.
• Crossfire’s API’s use industry-standard authentication.
• Crossfire offers secure options for data exchange, including SSH tunnels and SSL/TLS encryption.
• Crossfire’s integrations use the minimum permissions that are required to access the data they require.

Environment

• Crossfire’s servers are hosted in Amazon Web Services, which provides assurances for their physical and virtualised computing environments including SOC 1, 2, and 3, and ISO/IEC 27001.
• Crossfire operates within an Amazon Virtual Private Cloud (VPC), with subnets segregated by security level, and firewalls configured to restrict network access.
• Crossfire performs frequent pen testing and regular security updates.

Our Practices

• All staff are trained in keeping data safe and mandates policies that protect data.
• We monitor application logs, system logs, data access logs for unusual behaviour and have alerts in place based on these monitors.
• All staff are background checked.
• Our extensive security policy documents our procedures for handling incidents, which includes notifying our customers in the event of a verified breach.
• All passwords and access tokens are encrypted.
• All non-essential data is removed after 90 days.

Shared Responsibility

While we continuously focus on doing our part to maintain high standards for security and complying with regulations, you also have a role to play in helping to ensure the security of your data. As a data connectivity tool, our customers connect to a number of organisations and other parties are responsible for their own data security.