Security
Keeping your data safe
Your library sits in encrypted storage on AWS, inside a network of its own, behind specifically designed access rules. But security never stops — we are always scanning for vulnerabilities, undergo independent security verifications and run our own penetration testing.
How it is configured
Today
Sign-in
- Two-factor or SSO
In transit
- TLS 1.2 / 1.3
At rest
- Encrypted on S3
Network
- Isolated VPC
OngoingPatched on a schedule, scanned, and penetration tested
A summary — ask us for the detail
Guarding the gate
Most breaches come through an existing account. Sign-in is both an essential gateway and a potential vulnerability; which is why we're so serious about protecting it.
01
Two-factor, or your own identity provider
Turn on two-factor authentication, or sign-in to the SSO provider your organisation already runs. Email link validation and captcha verification stand in front of the login either way.
02
Data privacy and compliance
Naturally, we don't collect personal data without consent, and our data protection officers remove it on request. The platform is designed to comply with GDPR and PDPA.
Security by design
A fantastic software system is only part of the equation. At LightRocket, we understand that keeping your data secure, backing it up and designing reliable disaster-recovery protocols is just as important, if not more so.
01
Stored on AWS S3
Amazon S3 is a global reference for durability. Their data centres are protected by multiple layers of security. Your files sit behind those layers, at the resolution you uploaded.
02
Backed up, and restorable
Disk snapshots and database backups run on a schedule, so if there is bad day it's just a restore rather than a loss. Your data is always secure and retrievable.
03
Scanned on the way in
Every uploaded file goes through anti-malware scanning before it reaches your library, so nothing bad sits in your archive waiting for someone to download it.
Multi-tiered protection
Our dedicated security experts have designed a system that is configured for maximum security. But that doesn't mean we ever relax. We are always scanning the cyber horizon for attacks or vulnerabilities.
01
A network of your own
Each client’s infrastructure is isolated inside its own Virtual Private Cloud, with tight access control lists on every route in. Traffic between AWS endpoints stays on the private network and never crosses the public internet.
02
A firewall in front of the application
A web application firewall filters incoming traffic, blocks application-level attacks, and helps detect and absorb attempts to flood the service.
03
Encrypted in transit and at rest
TLS 1.2 and 1.3 on every connection to the platform, VPN for access to internal infrastructure, and encryption on archive storage.
04
Monitoring and alerts
Our systems are continually monitored for downtime, unexpected latency and packet loss, plus alerts on certificate events and any changes to infrastructure configuration.
Know the details
Ask our experts
Buying software raises plenty of important security questions, and a page on a website is no substitute for talking to real people or reviewing comprehensive infrastructure and policy documentation. Don't let the questions build up. Drop us a note and we'll book a meeting with one of our security experts.
What we can send
- A summary of disaster recovery protocols
- A detailed presentation of our infrastructure
- Where your data is hosted, and in which region
- How to reach our data protection officer
- What we delete, and when, if you ask us to
We’d love to explain more…
Still got questions?
Curious to see LightRocket in action? Want to know more about pricing? We’re always happy to show off our system and, yes, we’ll even help out with discounts and pricing.