Security

Last updated: June 05, 2024

Blog Recorder takes data security and privacy very seriously, and while we cannot expose too much detail around our practices (as it can empower the very people we are protecting ourselves against), we can provide general information to give you confidence in how we secure the data you entrust to us.

Data Security

All data is stored securely and encrypted using the latest and best practices offered by AWS S3, DigitalOcean Managed Databases, and Clerk.

All servers and services are running on a hosted and managed infrastructure using AWS and DigitalOcean, which ensures best security practices such as firewalls, and IDS/IPS, and DDOS mitigation.

All stored data is continously backed up and can be recovered.

Application Security

All user identities are stored and managed using Clerk. This ensures that all the latest and best security practices are used when storing emails, passwords, and authentication tokens from third-party social providers.

The Blog Recorder website, including all login and signup pages (from our website and mobile website), pass data via TLS 1.2 or higher.

Employee Security & Safeguards

We continuously train employees on best security practices, including how to identify social engineering, phishing scams, and hackers.

All new hires and contingent workers are required to sign Non-Disclosure and Confidentiality Agreements, and we provide clear guidelines on the granular access control system, which ensures employees are granted access only to the specific parts of the system necessary for their individual roles and tasks. Regular access reviews are also in place to monitor compliance and maintain the integrity of this access control.

Responsible disclosure program

Blog Recorder is committed to ensuring the security of our services and customer information. As part of this commitment, we encourage security researchers to contact us to report any potential weaknesses identified in any product, system, or asset belonging to Blog Recorder. This program isn’t intended to represent a public bug bounty program and we make no offers of reward or compensation for submitting potential issues. We appreciate your commitment to improving Blog Recorder services.

Contact Us

If you have any questions about our Data Security, you can contact us: