We take security seriously.
Protecting customer and consumer data is at the core of what we do. Spade’s information security program is designed to meet or exceed industry standards with a variety of controls to keep your information safe.
Looking to report a security concern or have questions about Spade’s security? Please contact security@spade.com.
Spade encrypts all of its data at rest and in transit for all of our customers. We utilize industry standard techniques and leverage AWS’ robust and well tested cloud infrastructure platform to deploy our services securely and confidently. Our data protection methods comply with SOC2 standards to ensure customer and company data as well as sensitive information is protected at all times.
All development projects at Spade follow secure development lifecycle principles, including security design reviews for new development, secure development training for all engineers, and software development conducted in line with OWASP Top 10 recommendations for web application security. We use tools such as ECR Container scans, Snyk container scans and dependency scans, SonarCloud, and GuardDuty to ensure we maintain high quality code and avoid vulnerable packages. We also define all of our infrastructure as code, which means all of our infrastructure definitions are held to the same standards as our code.
Spade deploys internal and external penetration testing as well as vulnerability scanning of all systems on a regular basis. All new systems and services are scanned prior to being deployed to production.
Spade takes the security of its data and that of its clients and customers seriously and ensures that only vetted personnel are given access to their resources. We embed the culture of security into our business by conducting employee security training & testing using current and emerging techniques and attack vectors.