Hoowla Security Policy

Protecting your data

We are committed to the security of all the data in Hoowla. That means physically and digitally.

You control access

As a Hoowla user you have the ability to invite as many users into your account to collaborate on your data, and the users that have the correct permission on your account can control who has access and what they are able to do. Please see our privacy policy for further information on data privacy.

User authentication

We provide standard access to Hoowla through a login and password. We also offer the option of using two-step authentication. This provides a second level of security for your Hoowla account. It means you’re also asked to enter a unique code generated by a separate authenticator app on your smartphone. We recommend you use two-step authentication as it reduces the risk of your Hoowla account being accessed if your password is compromised.

Physical security

Our users data, including personal data, is housed in a highly available, scalable solution situated in the ISO 27001 certified AWS datacentres in Dublin. https://aws.amazon.com/compliance/data-center/

Briefly this means

Access is scrutinised, controlled and monitored.
Video surveillance.
Intrusion detection, and access log monitoring systems
Physical access is strictly controlled by two factor authentication and 24 hour security escorts
Core applications are deployed to an N+1

Digital Security

Hoowla is accessed via HTTPS using Transport Layer Security (TLS). TLS is a cryptographic protocol designed to protect information transmitted over the internet against eavesdropping, tampering, and message forgery.

All data is encrypted at rest, using AES-256, military grade encryption.

All our developers are versed in critical web application security risks and keep up to date with emerging security new. All code is peer-reviewed and passes manual and automated testing, quality and security controls before being merged and released.

Data Redundancy

All data is backed up using Amazon S3 storage, providing extremely high durability. We perform regular backups of the Hoowla database and data integrity is validated on every update.

Backup Policy and System Monitoring

Hoowla servers are backed up multiple times daily, weekly and monthly and are monitored 24 hours a day, 7 days a week, 365 days a year.

Data Breaches

For our policy on data breaches and how we handle your data please see our privacy policy