Overview
This Security Policy ("Policy") outlines the security measures ClickFortify Inc ("ClickFortify," "us," "we," or "our") employs to protect the content posted in private Workspaces (as defined in our Terms of Service at
clickfortify.com/term-of-service) on our website (the "Site"). Policies and procedures may evolve over time, and we reserve the right to update this Policy at any time. Updates will be posted on the Site, with a revised date at the top of this Policy.
1. Account Data Privacy
All content posted within your ClickFortify account is private by default. Users not invited to join your account cannot access this data. Only authorized users added via the sub-accounts feature can view and manage your data.
2. Ownership and Access Control
Account owners retain full control and rights over all content within their account, including determining access permissions. If a user's access is revoked as outlined on the Site, they lose access to the account and its associated data.
3. Datacenter and Database Security
ClickFortify is hosted on Google Cloud Platform (GCP) in the U.S., whose data centers are independently audited (SOC 2 / ISO 27001). For disaster recovery, we take daily disk snapshots (kept for 14 days).
4. Account Security
Each user has an account protected by a hashed password (bcrypt). Email and password credentials are required to initiate a session on the ClickFortify platform.
5. Network Security
ClickFortify uses a dedicated production environment, including firewalls configured with a default deny policy, intrusion detection systems, and limited access for authorized employees. All access is logged and monitored.
6. Data Encryption
All customer data is encrypted at rest and in transit. Browser connections use TLS, and ClickFortify is configured to achieve an "A+" rating from Qualys SSL Labs.
7. Security Audits
We conduct internal code reviews to identify and mitigate vulnerabilities within our application.
8. Availability
We use automated monitoring to detect and respond to availability issues. We do not offer an uptime guarantee or service-level agreement unless agreed in writing.
9. Privacy Policy
Please refer to our Privacy Policy at
clickfortify.com/privacy-policy for details on how we collect, use, and disclose personal information.
10. Terms of Service
For service-related terms, refer to the ClickFortify Terms of Service at
clickfortify.com/term-of-service11. Contact Us
If you have questions about our security practices, please reach out to us via our contact page at
clickfortify.com/contact-us.
