Data management
We only collect the data that's necessary for business, and store it in a centralized location. Designate a team to manage the data, and establish minimum security standards.
Access controls
We limit who can access the data, and use password management tools to control access. Require employees to change default passwords and keep their systems and software up to date.
Security tools
We use firewalls, anti-virus software, VPNs, and two-factor authentication to make it harder for hackers to access the data.
Encryption
We convert sensitive data into a code that can only be read by authorized parties.
Policies
We educate employees on data protection practices, and conduct regular security audits.
Third parties
Ensure that any third-party vendors or partners are also protecting customer data.