Security
Security at Alltus
We understand the importance of privacy and data security, and protecting your information is our top priority. We have implemented industry-leading security measures to keep your data safe, and our practices are reviewed and updated to stay current with the latest standards.
Secure by design
Security is built into how the product is developed and operated — not added at the end.
Secure software development
We follow industry best practices for secure software development, including regular code reviews and vulnerability scanning.
Secure infrastructure
We use industry-leading cloud providers to host our software and data. Our infrastructure is regularly reviewed and updated to keep it secure and current.
Data encryption
All confidential data is encrypted in transit and at rest.
Secure by policy
The frameworks and programs your IT and legal teams will ask about, in one place.
California Consumer Privacy Act (CCPA)
We comply with all relevant regulations and standards, including the CCPA.
SOC 2 framework
We follow the SOC 2 framework for our security policies and procedures. These are reviewed and updated regularly to stay current with industry standards.
Responsible disclosure
We run a responsible disclosure program, and we encourage security researchers to report any vulnerability they find.
Policies and terms
Responsible disclosure policy
How to report a vulnerability, and what we commit to in return.
Privacy policy
What we collect, how we use it, and the rights you have over it.
Taxpayer terms of use
The terms that govern taxpayer-facing services we run for partners.
SMS terms and conditions
How consent, message frequency, and opt-out work for text messages.
Terms of service
Our customer agreement, the data processing addendum, and the terms for members of the public who use our services.