Security / trust page — found from the homepage — Everhour

Cited by

Facts read from this source

• Ssl encryption Report an error

  “Everhour ensures that all accounts use SSL-encrypted connections, which provides the same level of security as online banks.”

• Uptime average Report an error

  “Everhour maintains an impressive uptime average of 99%”

• Data protection Report an error

  “The data is protected by hardware RAID, which ensures redundancy over multiple data storage units. Additionally, we deploy critical servers with redundant power supplies and components in at least redundant pairs”

• Retention backups Report an error

  “Backups occur every day and are replicated to, at least, 2 physical data centers. Upon deletion we delete customer data immediately from our databases. Database backups are retained for 30 days.”

• Pci dss Report an error

  “Everhour has a PCI-DSS Merchant Certificate, although we don’t store any payment information.”

• SOC 2 Report an error

  “We rely on our server host’s audit, and they are SOC 2 compliant. The SOC 2 Audit report can be downloaded from their compliance reports manager site.”

• Provider regions Report an error

  “Everhour hosts its software and stores data on AWS in two locations: Oregon (USA) and Frankfurt (Germany). The data is replicated across these two regions for redundancy purposes.”

• Encryption transit Report an error

  “Everhour ensures that all data is encrypted in transit, with all connections using TLS 1.2 for secure communication.”

• Password storage Report an error

  “Passwords are stored hashed and salted, and backups are encrypted.”

• Attachments storage Report an error

  “Attachments and other file assets are stored at rest on Amazon S3.”

• Log retention Report an error

  “Everhour maintains a central logging infrastructure and an internal activity log. Application logs that assist with Everhour support cases are retained for 7 days.”

• SSO Report an error

  “Yes, we provide single sign-on via Google and a bunch of other tools.”

• Access management Report an error

  “Everhour supports sign-in via email/password and SSO. We also offer different access permissions within the account to manage access.”

• Password policy Report an error

  “To ensure password strength, we require a minimum length of 6 characters and provide a password strength estimator to assist users in choosing strong passwords.”

• Release cycle Report an error

  “Our software is released frequently, with multiple deploys per week. Security patches for third-party libraries are applied as soon as they become available”

• Employee access Report an error

  “Everhour employees have restricted, logged, and monitored access to customers' data solely for troubleshooting purposes.”

• Anti malware Report an error

  “As for the antivirus and anti-malware usage we use AWS WAF with rules to block spam and xss activities.”

• Audit trail Report an error

  “we maintain an immutable audit trail for support-related data access”

• Terms note Report an error

  “NOTE: Separate legal terms apply to Shifts by Everhour and Trello Power-Up by Everhour.”

• Status page Report an error

  “Any system-related issues are immediately reported and updated in real-time on the Everhour Status page.”

• Operating since Report an error

  “As a company that has been operating in the market since 2015, we take the security and reliability of our software very seriously”

3 facts read from this page are not shown because they could not be confirmed on the page as captured.

Scores citing this record

• The Agency Owner Working-time law & audit record
• The Agency Owner Absence & shift planning
• The Agency Owner European sovereignty
• The Field Supervisor Working-time law & audit record
• The Field Supervisor European sovereignty
• The Operations Lead Absence & shift planning
• The Operations Lead European sovereignty
• The Payroll Officer European sovereignty
• The Skeptic Capture in the real workplace
• The Skeptic Working-time law & audit record
• The Skeptic Absence & shift planning
• The Skeptic European sovereignty
• The Works Council Advocate European sovereignty