Our Commitment to Security
Smartbills takes the security of your data seriously. We implement comprehensive security measures to protect your expense data and personal information.
Certifications & Compliance
Infrastructure Security
Cloud Infrastructure
- Provider: Amazon Web Services (AWS)
- Regions: US-East, Canada-Central, EU-West
- Redundancy: Multi-AZ deployment
- Backups: Daily automated backups
Network Security
- DDoS protection
- Web Application Firewall (WAF)
- Private subnets for sensitive services
- Network segmentation
Data Protection
Encryption
Access Controls
- Role-based access control (RBAC)
- Least privilege principle
- Multi-factor authentication
- Regular access reviews
Application Security
Secure Development
- Security training for developers
- Code reviews for all changes
- Static application security testing (SAST)
- Dynamic application security testing (DAST)
Vulnerability Management
- Regular penetration testing
- Bug bounty program
- Dependency scanning
- Security patches within 24 hours for critical issues
Operational Security
Employee Security
- Background checks
- Security awareness training
- Confidentiality agreements
- Limited data access
Incident Response
- 24/7 monitoring
- Incident response team
- Documented procedures
- Customer notification within 72 hours
Physical Security
Our data centers (AWS) feature:
- 24/7 security personnel
- Biometric access controls
- Video surveillance
- Environmental controls
Your Security
Account Security
Features to protect your account:
- Strong password requirements
- Two-factor authentication (2FA)
- Session management
- Login notifications
Best Practices
Enable 2FA - Add an extra layer of security to your account.
Use strong passwords - Unique passwords for each service.
Review access regularly - Remove unused users and integrations.
Reporting Security Issues
Bug Bounty
Report vulnerabilities responsibly:
- Email: [email protected]
- Response: Within 24 hours
- Recognition: Hall of fame and rewards
What to Report
- Authentication bypasses
- Data exposure vulnerabilities
- XSS, CSRF, injection attacks
- Authorization flaws
Security Updates
Subscribe to security advisories:
For security questions:
