Security Overview

Customer data security and privacy are top-of-mind at SelfPetition Pro. The content on this page outlines measures we have in place to keep customer data safe and to operate our services efficiently.

Access control and organizational security

Personnel

All of our employees and contractors at SelfPetition Pro are trained and made aware of security concerns around access and best practices for our systems.

Regular reviews and testing

Our software infrastructure is updated regularly with the latest security patches. We employ manual and automated testing throughout our development pipeline to be cognizant of potential vulnerabilities before any updates are deployed to production.

Team responsibilities

• Reviewing all changes to the code and infrastructure to ensure they follow best practices and security guidelines (such as OWASP)
• Building and operating SelfPetition Pro’s infrastructure, including logs, monitoring, and authentication
• Reviewing, testing, and designing incident response processes
• Responding to alerts triggered by any security events
• Monitoring and alerting on anomalous activity

Incident management and disaster recovery

Redundancy

Our entire infrastructure is hosted in the cloud. Files uploaded by our customers are stored on servers that utilize cutting-edge technology to eliminate bottlenecks and points of failure.

Backups

We perform multiple backups per week of all databases and files. Our backups are encrypted and stored safely by our cloud provider. We have procedures for responding to incidents managed by our engineering team. In the event of an incident, we contact impacted account owners and work with them closely until the issue is resolved.

Hosting Architecture

SelfPetition Pro is hosted on Amazon Web Services (AWS) in the United States and protected by the robust security measures provided by Amazon. Customer Data stored within AWS is encrypted at all times. Amazon does not have access to unencrypted Customer Data.

Training Data

At SelfPetition Pro, we place the highest importance on the respect for and protection of your privacy and confidentiality. Our AI/LLM platforms do not use information provided by you within the SelfPetition Pro platform for training purposes. User inputs and data shared with us are used solely for delivering our services. They are not disclosed, sold, or shared publicly or with third parties unless we have explicit permission. Should this policy change, we will seek and obtain consent prior to doing so.

Encryption In Transit and At Rest

Encryption in transit

All internet traffic between our servers and your device is encrypted with SSL/TLS using the latest protocols. We require HTTPS on all requests, use HTTP Strict Transport Security, authenticated origin pulls, and perform browser integrity checks to prevent MITM attacks and cookie hijacking.

Encryption at rest

We employ military-grade encryption (AES-256) and tamper-proofing for files shared on the platform.

Have a concern? Want to learn more?

Please send us a note at support@selfpetitionpro.com — we’re happy to help in any way we can.