Security Overview

This Security Overview summarizes how BotBeaver LLC protects data processed through BotBeaver services. It is for customer due diligence and does not modify your contract. For contractual commitments, see the Terms, DPA, and order form.

1. Infrastructure

• Production workloads run on managed cloud infrastructure with industry-standard physical and network controls.
• Separate environments for production and non-production where practicable.
• Regular patching and dependency monitoring for internet-facing services.

2. Encryption and secrets

• TLS 1.2+ for data in transit between users, BotBeaver, and subprocessors.
• Encryption at rest for integration credentials, API keys, and similar secrets.
• Secrets are not logged in plain text in application logs.

3. Access control

• Role-based access for personnel with least-privilege defaults.
• Multi-factor authentication for administrative and production access.
• Access reviews and revocation on role change or offboarding.

4. Application security

• Input validation and rate limiting on customer-facing endpoints where deployed.
• Webhook and API authentication using customer-specific credentials.
• Logical tenant separation in application and data layers where architecture supports it.

5. Monitoring and incident response

• Centralized logging for security-relevant events with retention up to 90 days.
• Incident response procedures including customer notification for confirmed breaches affecting customer data, per the DPA.
• Responsible disclosure: report suspected vulnerabilities to privacy@botbeaver.ai.

6. Vendor management

Subprocessors are vetted for security posture appropriate to their role. Categories and a named list are available on request at privacy@botbeaver.ai.

7. Customer responsibilities

You are responsible for strong passwords on your accounts, limiting dashboard access to authorized staff, and configuring agents and integrations in line with your compliance obligations.

8. Contact

Security questions: privacy@botbeaver.ai. General inquiries: abbasqureshi@botbeaver.ai.