Security
Protecting your data is a baseline requirement, not an afterthought.
Security is fundamental to our platform. We employ industry-standard measures to keep your data and transactions safe.
Data Encryption
All data is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption. Our database volumes, backups, and replicas are fully encrypted.
Secure Payments
We do not store credit card numbers on our servers. All payments are securely processed by Stripe, a certified PCI Service Provider Level 1.
Access Control
We enforce strict role-based access control (RBAC). Your private data, messages, and draft campaigns are strictly siloed and only accessible by authorized users within your organization.
Vulnerability Disclosure
If you are a security researcher and have found a vulnerability, please responsibly disclose it to security@castway.com.