Security

Our Commitment to Security

Security is at the core of everything we do at Minimal. We understand that you're entrusting us with your valuable data, and we take that responsibility seriously. Our comprehensive security program is designed to protect your information through multiple layers of protection, continuous monitoring, and strict compliance with industry standards.

Infrastructure Security

• AWS Cloud Infrastructure: Hosted on Amazon Web Services, which maintains SOC 2, ISO 27001, and other industry certifications
• Network Isolation: Services deployed within isolated virtual private cloud (VPC) environments
• AWS Physical Security: AWS data centers feature comprehensive physical and environmental security controls

Data Protection

Encryption

• In-Transit Encryption: TLS encryption for all data transmission between clients and our services
• At-Rest Encryption: Data stored using AWS encryption services (AES-256)

Access Control

• Authentication: Secure user authentication for account access
• AWS IAM: Infrastructure access managed through AWS Identity and Access Management

Application Security

• Secure Development Lifecycle: Security integrated into every phase of development
• Code Review Process: Mandatory peer review and automated security scanning
• Dependency Management: Automated vulnerability scanning of third-party libraries
• Input Validation: Comprehensive validation and sanitization of all user inputs
• API Security: Rate limiting, authentication, and authorization on all API endpoints
• Session Management: Secure session handling with automatic timeout and rotation

Regulatory Compliance

• GDPR (General Data Protection Regulation): We strive to comply with EU data protection requirements
• CCPA (California Consumer Privacy Act): We strive to comply with California privacy regulations
• AWS Certifications: Our infrastructure provider (AWS) maintains SOC 2, ISO 27001, and other industry certifications

Monitoring & Incident Response

• AWS CloudWatch: Service monitoring and alerting through AWS infrastructure
• Incident Response: We investigate and respond to security concerns as they arise
• Customer Notification: We will communicate transparently in case of security incidents

Business Continuity

• Automated Backups: Continuous data backup with point-in-time recovery
• Disaster Recovery: Tested disaster recovery procedures with defined RTO and RPO
• High Availability: Redundant systems across multiple availability zones
• Uptime Target: 99.9% uptime goal with proactive monitoring

Data Management

• Data Export: Export your data for backup or migration
• Data Deletion: We will delete your data upon request in accordance with applicable law