Security is a top priority at Baseline. We are committed to protecting your data and applying established safeguards throughout the platform.
1. Infrastructure security
Our infrastructure is hosted on Google Cloud Platform (GCP), a cloud provider with security certifications including SOC 2 and ISO 27001. We use GCP security capabilities to protect our network and services.
2. Data encryption
We encrypt data in transit using TLS 1.2+ and data at rest using AES-256 encryption. This includes sensitive bid data and estimating costs.
3. Authentication
We use OAuth 2.0 and OpenID Connect to secure account access. We do not store account passwords directly and rely on a secure identity provider.
4. Access control
Access to production data is limited to authorized personnel with a legitimate business need. We apply least-privilege access and multifactor authentication for administrative access.
5. Reporting vulnerabilities
If you believe you found a vulnerability, report it to support@baselinecivil.ca.