Data Encryption

Strong encryption is used to protect all data in transit and at rest using the industry-standard TLS (Transport Layer Security) protocol and AES (Advanced Encryption Standard) 256-bit key lengths.

Audited Policies & Controls

Zeck maintains robust security and operational policies, has third-party monitored platform security controls, and has audits performed by accredited firms.

Event Monitoring

All product systems are monitored for security and availability. If any security or availability event were to occur, alerts are delivered to our engineering and product team via realtime messaging services, text messages, and email alerts.

Privileged Access

Zeck follows the principle of least privilege for administration and data access, meaning that engineers only are given access by security group to the precise data they need to perform their jobs.

Secure Development

At Zeck, all secured coding best practices (SSDLC) are followed. All code changes must move through lower environments, are reviewed and approved, and must go through User Acceptance Testing (UAT) testing prior to production deployment.

Penetration Testing

In addition to internal security testing, Zeck uses third-party independent penetration testing to check for security vulnerabilities.

Data Backup

Zeck backs up customer data to several alternate regions in case any issues arise in a primary region. We have a robust disaster recovery plan that is tested and reviewed by third-parties.

Data Privacy

Customer data is considered confidential and is handled as such. Customer data is never stored outside the production environment. All Zeck employees sign confidentiality agreements and are trained on our confidential data policies.