Security Policy

Secure Infrastructure

InspireHQ's platform is built with security at top of mind. We continuously monitor and validate our infrastructure against best practices to ensure that we are continuously meeting our security and reliability requirements.

Encryption

InspireHQ encrypts all sensitive data, both at rest and in transit. The underlying services automatically use industry standard AES-256 encryption for storage. All endpoints support TLS 1.2 and above for encryption in transit with an A+ grade from SSL Labs.

Continuous Security

InspireHQ focuses on continuous maintenance and monitoring of our security posture from code development through to production deployment. We implement multiple security controls including source code review, vulnerability scanning of libraries, source code and infrastructure and continuous monitoring of all cloud providers and assets.

IT Controls

InspireHQ focuses on continuous maintenance and monitoring of our security posture from code development through to production deployment. We implement multiple security controls including source code review, vulnerability scanning of libraries, source code and infrastructure and continuous monitoring of all cloud providers and assets.

Vulnerability Disclosure Program

InspireHQ leverages the hosting provider Render which has partnered with HackerOne to maintain a private vulnerability disclosure program. All reports are triaged by HackerOne and are then forwarded on to the Render team as appropriate.

DDoS Protection

InspireHQ has partnered with Cloudflare for DDoS protection. “Cloudflare’s 142 Tbps network blocks an average of 117 billion threats per day, including some of the largest DDoS attacks in history.”

Penetration Tests

InspireHQ's hosting provider Render undergoes annual third party application and network penetration tests with top tier independent firms.

Security Features

InspireHQ has built in a number of security features that we encourage our customers to take advantage of. From multi factor authentication to private URLs to automatically redirecting HTTP requests to HTTPS requests.

Physical Features

InspireHQ leverages Render Hosting that has partnered with multiple underlying cloud providers that take physical security seriously and have the attestation to back it up. All vendors are reviewed for their commitment to security from their physical to their virtual controls.

Compliance

We take security seriously. To that end, compliance reports and agreements validate of our commitment to adhering to security best practices and providing a level of assurance to our customers around the world. Please email Support to request a standard agreement or to ask about your compliance use case.

SOC 2: InspireHQ has intent to obtain both SOC 2 Type II and ISO 27001 compliance reports.