We respect your privacy and take significant efforts to protect all of your data. We go to considerable lengths to ensure that all data sent to Bubbl.us is handled securely - keeping Bubbl.us secure is fundamental to our business.
The following is what we're doing to keep your data and our infrastructure safe.
All traffic on Bubbl.us runs over SSL/TLS/HTTPS, the most common and trusted communications protocol on the internet.
Our information systems infrastructure is hosted on Amazon Web Services (AWS). AWS data centers are housed in nondescript facilities and employ strict safety measures to ensure data security.
To provide rigorous access controls, we have both network layer (IP) and transport layer (TCP) firewalls that segregate network traffic between application tiers.
Our network is built using Amazon's secure Virtual Private Cloud (VPC) technology, adding an extra layer of protection against intrusion.
Secure data centers
We have partnered with Amazon Web Services (AWS) to provide our web and data services because of their stringent security measures, which include compliance with the following certifications:
- SAS70 Type II audits
- Payment Card Industry (PCI) Data Security Standard (DSS)
- ISO 27001 certification
Disaster recovery and backups
Application database backups for Bubbl.us occur on daily basis and retained for seven day period.
By default, all of your mind maps and files are private unless you choose to share them.
For purposes of providing technical support, an administrator of your account may choose to grant the Bubbl.us Support permission to access an account in order to resolve a specified issue.
Bubbl.us supports sign-on with a unique username and password or single sign-on with Google/Facebook.
Only hashes of passwords are stored by our servers—never the passwords themselves.
Individual user identity is authenticated and re-verified with each transaction, using a unique token created at login.
Whether it’s corporate intellectual property, personal information, or a homework assignment, Bubbl.us does not own that data. We do not use your data for advertising. The data that you entrust to us remains yours.
Stripe ( https://stripe.com) powers the payment processing for thousands of businesses. We have partnered with Stripe to provide our payment processing because of their stringent security measures.
Your billing information is not stored on our servers. All billing information is encrypted and passed directly to Stripe using a secure HTTPS connection.
Stripe has been audited by a PCI-certified auditor and is certified to PCI Service Provider Level 1. This is the most stringent level of certification available.