Skip to content

Security

Swivel Data Security 🔒

Where does Swivel store the data we provide?

Section titled “Where does Swivel store the data we provide?”

Our data is stored in a secured network within a private secured database cluster. Our documents are stored on AWS S3 Platform in private buckets.

Our computing platform has obtained the proper certifications by third-party auditors to ensure both our data and our customer data is safeguarded using proper standard and compliant procedures. Our computing platform is SOC2 TYPE 22, ISO/IEC 27001: 2013, and PCI-DSS compliant.

Our database is encrypted in transit and at rest with secure encrypted connections across private networks. Our customers documents are encrypted at rest in Private AWS S3 Buckets.

What kind of Redundancy does Swivel have in case of a data failure?

Section titled “What kind of Redundancy does Swivel have in case of a data failure?”

Our database nodes are clustered in a high-availability architecture with stand-by nodes that take over in case of primary failure. The data within the cluster is fully backed up daily. Our documents are stored with versioning within privately encrypted s3 buckets with mirrored backups in case of main bucket failure.

Can a special data field be added the personal/private data area? Example “Drivers License No.”?

Section titled “Can a special data field be added the personal/private data area? Example “Drivers License No.”?”

No, not at this time.

How is the PII (Personal Identifiable Information) secured?

Section titled “How is the PII (Personal Identifiable Information) secured?”

PII data fields are encrypted within our database (which is also encrypted). Viewing and editing PII data within in the user interface is purposely built for intentional access. Any access to the PII data is logged with a timestamp and id of person viewing the data.