Matsivo relies on managed cloud infrastructure for storage and transport encryption, and keeps application secrets out of source code and out of the browser.
In transit
- All connections use TLS; HTTP is redirected to HTTPS.
- Internal calls between the application and its data services use encrypted connections.
At rest
- Databases, backups and uploaded files are stored on managed infrastructure with encryption at rest enabled by the provider.
- Uploaded evidence files (such as delivery photos) are stored in access-controlled buckets, not on public URLs.
Credentials and secrets
- Passwords are stored only as salted one-way hashes by the managed authentication service.
- MFA secrets are held by the authentication service and are never exposed to the application UI.
- Application secrets and API keys are stored in a managed secret store and injected at runtime.
Questions about this area?
Our team answers security questionnaires and reviews. Write to security@matsivo.com.