Data Protection and Encryption at CrowdHandler

CrowdHandler utilizes encryption and other safeguards to protect data in transit and at rest. Our data protection stack includes:

Data in Transit#

All communication between end users, our API and client applications is encrypted using TLS. We maintain an A+ rating on our SSL Labs assessment.

Data at Rest#

CrowdHandler does not directly store customer data, but we encrypt all data at rest for our own infrastructure including:

• RDS MySQL databases - Our RDS database instances use native AWS encryption with keys managed through KMS.
• S3 file storage - All files and data within S3 are encrypted at the object level.
• Lambda environment variables - Environment variables used by our Lambda functions are encrypted at rest using KMS.

Secure Data Patches#

To ensure maximum protection of data and infrastructure, we maintain strict patch management policies:

• Auto-minor version upgrades - Our database instances have auto minor version updates enabled to automatically apply the latest MySQL security patches.
• Lambda runtime updates - We update the Lambda execution environment and runtime libraries to the latest supported versions to patch any vulnerabilities.
• Dependency checks - All new code is scanned for known vulnerabilities in any libraries/dependencies before being deployed. Any critical issues must be patched before deploying changes.

CrowdHandler's data protection controls defend against unauthorized access or leaks of sensitive data in transit or at rest within our infrastructure. Encryption, on-going patching and dependency checks aim to maintain maximum security and compliance of the data and systems we do manage. However, customers maintain responsibility over any sensitive data within their own environments and applications.