Security

01Infrastructure Security

The Terrabase Platform is hosted on industry-leading cloud infrastructure with physical and environmental controls designed to protect against unauthorized access, natural disasters, and environmental hazards.

Our infrastructure is designed for redundancy and availability. We employ network segmentation, firewalls, and monitoring to protect Platform systems from unauthorized access and external threats.

02Data Encryption

Data in transit is encrypted using industry-standard TLS protocols to protect information as it moves between your systems, our Platform, and integrated Third-Party Services.

Data at rest is encrypted using strong encryption standards to protect stored Customer data and Personal Information on our systems.

03Access Controls

Access to the Platform requires authenticated user credentials. Customers control which Authorized Users may access their data through role-based permissions within the Platform.

Terrabase employees access production systems only on a need-to-know basis. Internal access is logged and reviewed. Multi-factor authentication and SSO options are supported for user sign-in.

04Application Security

We follow secure development practices and conduct regular reviews of our application code and architecture to identify and remediate vulnerabilities.

We monitor the Platform for anomalous activity and employ controls to detect and prevent fraud, abuse, and security incidents.

05Third-Party Services

The Platform integrates with Third-Party Services at the direction of Authorized Users. Terrabase evaluates service providers that process data on our behalf and expects them to maintain security practices consistent with this document and our Privacy Policy.

Customers and Authorized Users should review the security and privacy practices of any Third-Party Service they enable within the Platform.

06Data Retention and Deletion

We retain Personal Information and Customer data only as long as necessary to fulfill the purposes described in our Privacy Policy and to provide the Services. Upon termination of Services or upon valid request, we process data deletion in accordance with our agreements and applicable law.

07Incident Response

Terrabase maintains an incident response process to identify, contain, and remediate security events. In the event of a confirmed security incident affecting Customer data, we will notify affected Customers without undue delay in accordance with applicable law and contractual obligations.

To report a security concern or suspected vulnerability, contact us immediately at support@terrabase.ai.

08Compliance and Auditing

We implement industry-standard measures to protect Personal Information and Customer data. While no system can guarantee absolute security, we continuously evaluate and improve our security posture.

Terrabase may engage professional advisors, auditors, and insurers as necessary to maintain and assess our security and compliance programs.

09Employee and Organizational Security

Terrabase personnel with access to sensitive systems undergo background checks where permitted by law and receive training on data handling and security practices.

We maintain policies governing the acceptable use of systems, confidentiality of Customer data, and response procedures for security-related inquiries.

10Your Security Responsibilities

You are responsible for safeguarding your Account credentials and ensuring that Authorized Users within your organization follow appropriate security practices.

We recommend using strong, unique passwords or SSO authentication, reviewing Authorized User permissions regularly, and promptly reporting suspected unauthorized access to support@terrabase.ai.

11Questions

If you have questions about Terrabase security practices or wish to request additional information, contact us at support@terrabase.ai.