Security is a top priority at Baseline. We are committed to protecting your data and strictly adhering to industry standards.
1. Infrastructure Security
Our infrastructure is hosted on Google Cloud Platform (GCP), a leading cloud provider with robust security certifications (SOC 2, ISO 27001). We utilize GCP's advanced security features to protect our network and servers.
2. Data Encryption
We encrypt data in transit using TLS 1.2+ and data at rest using AES-256 encryption. This ensures that your sensitive information, including bid data and estimating costs, remains secure at all times.
3. Authentication
We use industry-standard authentication protocols (OAuth 2.0 / OpenID Connect) to secure access to your account. We do not store passwords directly; instead, we rely on secure identity providers.
4. Access Control
Access to production data is strictly limited to authorized personnel with a legitimate business need. We employ principle of least privilege (PoLP) and multi-factor authentication (MFA) for all administrative access.
5. Reporting Vulnerabilities
If you believe you have found a security vulnerability in our platform, please report it to us immediately at: support@baselinecivil.ca