Security

We are striving to build a platform that will make online collaboration as natural and intuitive as working together on an office whiteboard. Our entire business is stored in the cloud, as are the businesses of more than 5 million companies worldwide. We all benefit from having instant access to real-time and asynchronous collaboration tools, seamless integrations between our favorite services and cost-effective solutions that don’t require expensive maintenance. And it’s obvious that the security of data generated and stored in the cloud is absolutely vital. We understand that the only way to ensure data security is to strive for perfection and be confident in people, who are in charge of data processing.
Hundreds of thousands of clients across the world trust us with their information, and we’re doing our best to justify their trust. We want you to understand that our team uses RealtimeBoard on a daily basis and stores plans, ideas and crucial business strategies within the service. We take privacy and data security very seriously. Therefore, we’ve taken a number of steps to ensure that your information is always secure when you’re using RealtimeBoard.
Security program
RealtimeBoard has established an information security management framework describing the purpose, direction, principles, and basic rules for how we maintain trust. This is accomplished by assessing risks and continually improving the security, confidentiality, integrity, and availability of the service. We regularly review and update security policies, provide security training, perform application and network security testing, monitor compliance with security policies, and conduct internal and external risk assessments.
Service uptime
Being able to access the service consistently at all times is extremely important when it comes to SaaS solutions. We’re happy to say that our uptime has exceeded 99,95% for the past two years. Feel free to check the dedicated status page for more information. You may also subscribe for notifications about service availability and any possible issues.
Constant monitoring
Establishing a consistent uptime track record is impossible without proper monitoring. Our team is ready to react to any incident, 24 hours a day, 7 days a week. We’ve developed a reliable system to ensure that select employees are instantly notified of any possible safety risks.
Data privacy
You can download and export all your files and boards at any point in time. Privacy options ensure that your boards stay as accessible as you want them to be. Access to user data by RealtimeBoard employees is strictly regulated. It’s only performed for troubleshooting needs, and only with your approval.
World-class data centers
RealtimeBoard server infrastructure is hosted on Amazon Web Services. AWS data centers comply with the strictest international security standards for financial sector, healthcare, government institutions, etc. AWS compliance program is designed to closely follow international norms and regulations, while protecting confidentiality and data privacy. Data centers provide the necessary means to operate 24 x 7 x 365, and protect data from physical damage and network issues.
Regular backup
User data is stored on a Redis failover cluster, backed up every 10 minutes and encrypted. No matter what happens, your work will stay safe. Even if you have accidentally deleted a board, there’s always a way back. We keep backup copies of deleted boards for 30 days. There are also daily backups of the entire database that are stored separately from the main data center.
Data encryption
When you access RealtimeBoard, SSL technology protects your information using both server authentication and data encryption. We use TLS with at least 128-bit AES encryption. The connection uses TLS v1.2. It is encrypted and authenticated using AES_128_GCM, and uses ECDHE_RSA as the key exchange mechanism. SSL implementation at RealtimeBoard scored “A” on Qualys’ SSL Server test.

Backups are encrypted with AES-256. Passwords are never stored as clear text. They are always hashed and salted securely.
Payment processing
All the payment-related services are provided by Stripe, which is widely regarded as one of the most reliable payment processors in the industry. This is confirmed by a PCI DSS certificate of the highest level. Nobody at RealtimeBoard can store or access any of the sensitive payment information.
Want to learn more from our security whitepaper? Email us at sales@realtimeboard.com