Security

Last updated: October 5, 2026

At Furcata, we take the security of your data very seriously. We understand that trust is paramount, and we are committed to protecting your information using industry-leading security practices.

Here is an overview of the practices and controls we use to keep your data safe.

I. Infrastructure Security

Managed cloud environment: We operate in a secure, professionally managed cloud environment that provides encryption of data at rest and in transit, network isolation, and continuous monitoring. Our infrastructure providers maintain recognized security certifications and undergo independent audits.
Segregation of environments: Production systems are separated from development and testing environments, and access between them is restricted.
Change management: Changes to production systems follow a review process designed to prevent unauthorized or unreviewed modifications.

II. Application Security

Secure development practices: Our engineering team follows secure coding practices intended to minimize the risk of introducing vulnerabilities into our codebase.
Authentication: Access to the Furcata platform is protected by industry-standard authentication mechanisms, including passwordless sign-in with established identity providers and multi-factor authentication options where supported.
Authorization: Role-based access controls limit what each user account is able to view or change.
Dependency management: We monitor the third-party software components we rely on and apply security updates on a risk-prioritized basis.

III. Data Protection

Encryption in transit: Data transmitted between your device, our platform, and our service providers is encrypted using industry-standard transport encryption.
Encryption at rest: Sensitive data is encrypted at rest.
Access controls: Access to production data is limited to authorized personnel on a least-privilege, need-to-know basis, and is logged.
Data minimization: We collect and retain only the information we need to operate the service, as described in our Privacy Policy.

IV. Communications and Messaging Security

Secure channels: Messaging and voice traffic is carried over secure, industry-standard channels operated by established carrier and messaging network partners.
Anti-fraud controls: We apply controls intended to detect and prevent abuse, spoofing, and unsolicited messaging on our platform, and we cooperate with carriers and regulators on traceback requests.
Sender identity: Where a messaging channel supports sender verification and caller authentication standards, we support their implementation on behalf of our customers.

V. Payment Security

Payments are processed by established, PCI-DSS compliant payment processors. We do not store full payment card numbers on our systems; card data is handled by our payment partners using industry-standard tokenization and encryption.

VI. Incident Response

We maintain an incident response process to detect, investigate, contain, and remediate security incidents.
Where a security incident affects personal data, we notify affected customers and the relevant authorities as required by applicable law and our Data Processing Addendum.

VII. Vulnerability Disclosure

We welcome reports from security researchers. Our Vulnerability Disclosure Policy explains how to report a suspected vulnerability and what you can expect from us in return.

VIII. Compliance and Third Parties

We select service providers that maintain recognized security certifications and we require them to protect data in accordance with our agreements. Our Data Processing Addendum describes the categories of service providers we use and the safeguards that apply to international transfers.

IX. Your Role in Security

Keep your account credentials confidential and do not share them.
Enable multi-factor authentication where available.
Report suspected unauthorized access or suspicious activity to us promptly.

X. Contact Us

If you have questions about our security practices, or wish to report a security concern, contact us at security@furcata.com.