Security Overview

Sixty67 Intelligence is built with security and privacy at its core. This overview summarizes the safeguards we use to protect your data.

Infrastructure

• Hosted on Base44 cloud infrastructure in Canada and the United States.
• MongoDB with row-level security (RLS) isolating each account's data.
• Cloudflare CDN and WAF for delivery and protection.
• Daily automated backups.

Encryption

• TLS 1.2+ for all data in transit.
• AES-256 encryption for data at rest.
• Payments tokenized by Stripe; we never store full card numbers.

Access Control

• Role-based access control (RBAC) across all features.
• Row-level security so users only see data they are permitted to.
• Passwords hashed with bcrypt.

Monitoring

We continuously monitor for security events, unusual access patterns, and system anomalies.

Data Privacy

Our practices are aligned with PIPEDA, GDPR, and CCPA. See our Privacy Policy for details.

Compliance Certifications

SOC 2 Type II is in progress and targeted for Q1 2027. We provide compliance reports under NDA on request.

Vulnerability Management

We run regular vulnerability scans, patch promptly, and welcome responsible disclosure from security researchers.

Employee Security

Staff access is least-privilege, logged, and reviewed. All personnel complete security training.

Contact

Security questions or to report a vulnerability? Contact security@sixty67intelligence.com.