> For the complete documentation index, see [llms.txt](https://trust.impact.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://trust.impact.com/impact.com-data-security-and-privacy-trust-center/security-features.md).

# Security Features

Every layer of the platform is protected by a multi-layered security program.

## Application security

<table data-view="cards"><thead><tr><th></th><th></th></tr></thead><tbody><tr><td><strong>🧪 Recurring penetration testing</strong></td><td>We prioritize user data security. We leverage independent, third-party experts to conduct comprehensive penetration testing of our web applications, mobile apps (Android/iOS), and underlying APIs. This rigorous testing process identifies and addresses potential vulnerabilities before they can be exploited.</td></tr><tr><td><strong>🔒 Data encryption at rest</strong></td><td>We safeguard your information with industry-leading encryption. All databases and backups are encrypted at rest using AES-256, the strongest block-level storage encryption standard available. This advanced technology ensures your data remains protected even in the event of a security breach.</td></tr><tr><td><strong>🧱 Secure development process</strong></td><td>Adhering to a secure development process is crucial for safeguarding digital assets. Our commitment to robust security includes a meticulous focus on addressing the OWASP Top 10 security risks. This ensures the highest standards of security in our software.</td></tr><tr><td><strong>📋 Audit trail and logging</strong></td><td>For enhanced security, impact.com maintains a central logging platform that meticulously tracks all user access and actions within the system. These detailed logs are securely stored for a minimum of one year, allowing us to thoroughly investigate any potential security incidents and ensure ongoing accountability.</td></tr></tbody></table>

## Data networking & security

<table data-view="cards"><thead><tr><th></th><th></th></tr></thead><tbody><tr><td><strong>🏗️ Secure infrastructure</strong></td><td>At impact.com, your data benefits from the utmost protection. We leverage top-tier cloud service providers known for their rigorous security practices. All data centers storing impact.com's data hold certifications like SOC 1, SOC 2, SOC 3, and ISO 27001. These certifications demonstrate their commitment to comprehensive security controls, data confidentiality, and ongoing system integrity.</td></tr><tr><td><strong>📡 Monitoring &#x26; alerting</strong></td><td>At impact.com, we take a proactive approach to security. Our sophisticated monitoring and alerting systems are constantly on guard, scanning our network for anomalies and suspicious activity. This vigilance allows us to identify and address potential threats before they can escalate, ensuring the continued protection of your data.</td></tr><tr><td><strong>💾 Continuous backups</strong></td><td>impact.com prioritizes data redundancy for complete peace of mind. We employ a comprehensive backup strategy, including continuous backups for ongoing data capture and weekly full backups. This robust system allows us to restore your data to any point within the past year, minimizing downtime and ensuring business continuity in the event of any unforeseen circumstances.</td></tr><tr><td><strong>🔏 Data encrypted in transit</strong></td><td>We prioritize the security of your information during transit. We leverage industry-standard HTTPS with TLS 1.2 or higher encryption to safeguard all data transmissions between your device and our web application. This robust encryption technology ensures that your sensitive data remains protected from unauthorized access.</td></tr></tbody></table>

## Restricted access & authorization

<table data-view="cards"><thead><tr><th></th><th></th></tr></thead><tbody><tr><td><strong>🗂️ Data segregation &#x26; security</strong></td><td>We prioritize the strongest data security practices. We implement strict coding standards and rigorous code reviews to ensure customer data is logically separated within our system. Additionally, each customer record has a unique identifier, further enhancing data security and preventing any potential mix-ups.</td></tr><tr><td><strong>🔑 Access management &#x26; controls</strong></td><td>At impact.com, we take your data privacy seriously. We adhere to the "principle of least privilege," ensuring that access to customer data is limited to authorized employees who require it for their specific job duties. Additionally, all system access is meticulously logged, providing an extra layer of accountability and security.</td></tr><tr><td><strong>⚙️ Thorough system management</strong></td><td>At impact.com, we prioritize a smooth user experience. We have comprehensive change management controls in place, ensuring all system changes that directly impact our customers undergo rigorous planning and clear communication. This proactive approach keeps you informed and minimizes disruption to your workflow.</td></tr></tbody></table>

## Company security

<table data-view="cards"><thead><tr><th></th><th></th></tr></thead><tbody><tr><td><strong>🎓 Mandatory training</strong></td><td>At impact.com, we prioritize data security. All new employees undergo comprehensive security awareness training within their first month, equipping them with the knowledge to protect user data.</td></tr><tr><td><strong>🪪 Employee background checks</strong></td><td>At impact.com, we prioritize user trust and security. All new employees undergo a thorough background check before their first day, ensuring a reliable and trustworthy team environment for protecting your data.</td></tr><tr><td><strong>📣 Responsible disclosure</strong></td><td>At impact.com, we take security very seriously. We believe in working together to maintain a secure environment for everyone. If you believe you've identified a potential vulnerability in our systems, we encourage you to disclose it responsibly through our dedicated program. By visiting our responsible disclosure page, you can report the issue directly to our security team.</td></tr></tbody></table>


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://trust.impact.com/impact.com-data-security-and-privacy-trust-center/security-features.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.