Security

End-to-End Encryption

All data transmitted between users is encrypted using TLS/SSL protocols. Session content is protected with end-to-end encryption to ensure only authorized participants can access shared materials.

Secure Authentication

We use industry-standard authentication methods including secure password hashing, multi-factor authentication (MFA), and session management. Passwords are never stored in plain text.

Data Protection

Data at rest is encrypted using AES-256 encryption. We implement regular backups, access controls, and data retention policies to protect your information and ensure availability.

Secure Infrastructure

Our infrastructure is hosted on secure, compliant cloud platforms with regular security updates, DDoS protection, and monitoring. We follow security best practices for server hardening and network security.

Regular Security Audits

We conduct regular security audits and vulnerability assessments to identify and address potential security issues. Our security team continuously monitors for threats and implements patches and updates as needed.

Access Controls

Session access is controlled through secure invitation links and participant management. Only authorized users can join sessions, and session hosts have full control over who can access their content.

Compliance

We are committed to compliance with relevant data protection regulations including GDPR, COPPA (for users under 13), and other applicable privacy laws. We implement privacy-by-design principles in our development process.

Incident Response

We maintain an incident response plan to quickly address any security issues. In the event of a security incident, we will notify affected users promptly and take appropriate remediation steps.

Security is an ongoing commitment. We continuously work to improve our security practices and stay current with industry standards and best practices. If you have security concerns or questions, please contact us at security@tutorboard.com.