Security | TapTasty

Availability and Continuity

Backups

TapTasty production systems and data are backed up regularly. We use a checklist to verify that backups are complete and usable, and we test them periodically.

99% Uptime

TapTasty provides its customers with a 99% uptime commitment.

Service Status

TapTasty service status, maintenance updates, and any incidents affecting our customers are documented at https://taptasty.statuspage.io.

Incident Response Plan

In the event of a breach involving a TapTasty information system, we have a detailed incident response plan in place.

Disaster Recovery Program

TapTasty's disaster recovery program is designed to keep our services available and restore them efficiently in the event of a disaster.

Internal IT Security

Security Management Team

TapTasty has a dedicated security team that enforces secure practices and responds to security incidents quickly and efficiently.

On-site Security

TapTasty offices are protected by keycard and biometric access controls and monitored by infrared cameras.

Policies

TapTasty maintains security policies that cover a wide range of topics and are reviewed and updated periodically.

Employee Training

All TapTasty employees are required to complete security and privacy training.

New Hire Reviews

All new hires must acknowledge TapTasty's information security policies and sign privacy safeguard and confidentiality agreements.

Platform Security

TLS Encryption

All data sent to or from TapTasty's infrastructure is encrypted in transit using industry-standard Transport Layer Security (TLS).

Strong Encryption

Service data is encrypted at rest using AES-256 encryption.

Separate Environments

TapTasty maintains separate testing, development, and production environments.

Quality Assurance

All changes to our application are subject to peer review and testing before being merged.

Role-Based Access Controls

Within the TapTasty application, data access can be configured according to role-based privileges.

Security Logs

TapTasty provides customers with security logs covering account and application changes.

Certified Subservice Providers

Our payment processor is PCI DSS certified.

Our cloud and managed service providers undergo regular SOC 1, SOC 2, and/or ISO 27001 audits to verify their security practices.

Data Protection and Privacy

TapTasty complies with the European Union's General Data Protection Regulation (GDPR).

GDPR Compliance

TapTasty meets the requirements of the EU GDPR and respects users' rights to control their personal data.

Right of Access and Erasure

TapTasty provides comprehensive technical privacy controls, including data retention, deletion, export, and access capabilities.

Subprocessor Disclosures

TapTasty uses third-party subprocessors to provide and operate the service. Please consult our DPA for details about these subprocessors.

Technical and Organizational Measures

TapTasty's technical and organizational security measures are designed to prevent unauthorized access to personal data and ensure the ongoing confidentiality, integrity, and availability of the TapTasty service.

At TapTasty, security is one of our top priorities.