איך אנחנו מטפלים במידע שלכם

AES-256 at rest with keys in a managed KMS, rotated [yearly]; TLS 1.2+ with HSTS in transit; signed, expiring download links.

Hosted on Vercel, Frankfurt region (fra1), Germany. Vercel holds a SOC 2 Type 2 attestation and ISO 27001 certification, and offers a GDPR Data Processing Addendum.

Role-based access, least privilege, MFA for all staff, time-limited support access granted by the user, every access logged.

Contractual zero-retention and no-training terms with every provider involved in processing.

Encrypted daily backups, 30-day retention, then purged.

PCI-DSS-compliant processor; Visamo stores only a payment token and the receipt.

Monitoring and alerting, a written incident-response plan, and notification to users and to the Privacy Protection Authority as Israeli law requires.