Recharge Trust Center

Security

Building security into everything we do

• Born in the cloud

  Our services are maintained and hosted on Google Cloud Platform (GCP), which complies with an independently verified set of standards and frameworks (for example, PCI DSS, SOC 2&3, ISO 27000). About Google Cloud Security.

• Active bug bounty program

  We maintain an active bug bounty program and contract with third-party organizations to conduct regular security tests to validate the effectiveness of our security controls. While our security team conducts frequent security reviews, we also encourage independent vulnerability reporting through our responsible disclosure page.

• Product security

  Our product development teams follow standardized processes with built-in security checks as well as complete security training programs to stay consistently vigilant for ways to maintain secure products and services.

  The Recharge product security framework combines a holistic and practical approach that integrates security best practices throughout each phase of the software development process.

• Operational security

  We have designed and continue to make significant investments in operations to achieve optimum security and ongoing compliance of our services. We combine automation and skilled reviewers to filter intelligence from many sources to determine the necessary course of action. Our operating procedures include:

  • 24/7 incident handling with defined escalation paths
  • Data encryption (including TLS and AES256) at rest and in transit
  • Secure system access management with multi-factor authentication
  • Logging, monitoring, and alerting
  • Vulnerability and patch management
  • Security testing to identify and remediate vulnerabilities
  • Maintenance and backup procedures