Security
What we do to keep your account and your challenges safe.
Hosted in the EU
The service runs on Amazon Web Services in the Frankfurt region (eu-central-1). Your data is stored there and does not leave the European Economic Area for the core service.
Encryption
Every connection uses HTTPS. Stored data is encrypted at rest, and tokens for connected services such as Slack or Strava are sealed with a dedicated key, never logged and deleted when you disconnect.
Payments
Payments are processed by Stripe. We never see or store your full card number.
Access control
Every request is checked against permissions that deny by default. Organization admins see counts and rates, not the private details of their people.
Private by default
Anything that shows you to others, such as a public wall, is off until you turn it on.
Report a security issue
Found a vulnerability? Email support@mygritwall.com and we will get back to you.