Security / trust page — Harvest

Cited by

Facts read from this source

• Ssl encryption Report an error

  “All Harvest and Forecast accounts use SSL-encrypted connections by default—the same level of security used by online banks. You never send or receive sensitive information in plain-text.”

• Provider Report an error

  “Harvest maintains an average 99.9% uptime by leveraging Google Cloud’s multi-zone Kubernetes clusters and auto-scaling for many workloads. Backups are securely stored in Google Cloud.”

• Status page Report an error

  “System status updates are reported in real time at HarvestStatus.com.”

• Retention Report an error

  “We keep database backups for up to 180 days, application logs for up to 90 days, and customer activity logs for up to 1 year.”

• Encryption at rest Report an error

  “Data is encrypted at rest and in transit.”

• Audit trail Report an error

  “Access to servers and customer data is strictly controlled and we keep an immutable audit trail for support-related data access.”

• Pci dss Report an error

  “Harvest has a PCI-DSS Merchant Certificate, although we don’t store any payment information.”

• SOC 2 Report an error

  “We rely on our server host’s audit, and they are SOC 2 certified.”

• Incident response plan Report an error

  “We maintain a security incident response plan to provide a framework to ensure that potential computer security incidents are managed in an effective and consistent manner. This document is reviewed at least annually.”

• Vulnerability disclosure Report an error

  “Email a complete description of the issue to security@getharvest.com including code samples and as much detail as possible.”

• Documents Report an error

  “Security whitepaper Self-assessment questionnaire”

• Free trial Report an error

  “Try Harvest free Free 30-day trial. No credit card required.”

• Entity Report an error

  “© Bending Spoons Operations S.p.A.”

Scores citing this record

• The Agency Owner Working-time law & audit record
• The Agency Owner European sovereignty
• The Field Supervisor Working-time law & audit record
• The Field Supervisor European sovereignty
• The Operations Lead Working-time law & audit record
• The Operations Lead European sovereignty
• The Payroll Officer Working-time law & audit record
• The Payroll Officer European sovereignty
• The Skeptic Working-time law & audit record
• The Skeptic European sovereignty
• The Works Council Advocate Working-time law & audit record
• The Works Council Advocate European sovereignty