MarketSage is built with security as a core principle. We implement industry-standard security measures to protect your data.
Infrastructure Security
Encryption
- In Transit: TLS 1.3 for all connections
- At Rest: AES-256 encryption for stored data
- Passwords: bcrypt hashing with salt
Hosting
- AWS infrastructure with SOC 2 compliance
- Private VPC with network isolation
- DDoS protection via AWS Shield
- Regular security patching
Application Security
Authentication
- JWT-based authentication
- Optional two-factor authentication (2FA)
- Session timeout and automatic logout
- Password strength requirements
Authorization
- Role-based access control (RBAC)
- Multi-tenant data isolation
- API key permissions
Data Protection
- Daily encrypted backups
- Point-in-time recovery capability
- Geographic redundancy
- 30-day backup retention
Compliance
- GDPR compliant
- NDPR compliant
- Regular security audits
- Penetration testing
Incident Response
In the event of a security incident, we will:
- Investigate and contain the incident
- Notify affected users within 72 hours
- Report to relevant authorities as required
- Provide a post-incident report
Reporting Security Issues
If you discover a security vulnerability, please report it to: security@marketsage.africa