Allocate places great importance on keeping your information secure. We encrypt all personal information on our website and our technology team endeavors to utilize best practices for security site-wide.
- All web traffic through Allocate is encrypted via HTTPS and TLS 1.2.
- All data and documents are encrypted using AES-256 encryption.
- Decryption keys are rotated on a scheduled cadence.
- Access to production systems utilizes the least privilege based on role, is audited and monitored, and requires MFA.
- We implement coding best practices incorporating the oWASP Top Ten. Development, testing, and production environments are separated. All code changes are peer-reviewed and tested prior to deployment into production.
Our team ensures that sufficient cyber security measures are in place.