Security

Our Commitment to Security

At havn, we take security seriously. We implement industry-standard security measures to protect your data and ensure the integrity of our platform.

1. Data Encryption

1.1 Encryption in Transit

All data transmitted between your device and our servers is encrypted using TLS (Transport Layer Security) 1.2 or higher. This ensures that your data cannot be intercepted or read by unauthorized parties during transmission.

1.2 Encryption at Rest

All sensitive data stored on our servers is encrypted at rest using AES-256 encryption. This means your data is protected even when it's not actively being transmitted.

2. Authentication and Access Control

• Multi-Factor Authentication (MFA): We support optional MFA to add an extra layer of security to your account
• Strong Password Requirements: We enforce password complexity requirements to ensure account security
• Session Management: Secure session tokens with automatic expiration and refresh mechanisms
• Access Logging: We log all access attempts and authentication events for security monitoring

3. Infrastructure Security

3.1 Cloud Security

Our infrastructure is hosted on secure cloud platforms with built-in security features including:

• Network isolation and firewalls
• DDoS protection and mitigation
• Regular security updates and patches
• Intrusion detection and prevention systems

3.2 Monitoring and Incident Response

We continuously monitor our systems for security threats and have established incident response procedures to quickly address any security issues.

4. Data Protection

• Regular Backups: We perform regular automated backups of all data
• Data Retention: We retain data only as long as necessary for business purposes
• Secure Deletion: When data is deleted, it is securely removed from all systems
• Access Controls: Strict access controls ensure only authorized personnel can access user data

5. Compliance and Certifications

We are committed to maintaining compliance with relevant security standards and regulations, including:

• GDPR (General Data Protection Regulation)
• Industry best practices for data security
• Regular security audits and assessments

6. Vulnerability Management

We maintain a proactive vulnerability management program that includes:

• Regular security assessments and penetration testing
• Automated vulnerability scanning
• Prompt patching of identified vulnerabilities
• A responsible disclosure program for security researchers

7. Your Role in Security

You play an important role in keeping your account secure:

• Use a strong, unique password
• Enable multi-factor authentication when available
• Keep your devices and browsers updated
• Be cautious of phishing attempts
• Report any suspicious activity immediately

8. Security Incident Reporting

If you discover a security vulnerability or have concerns about security, please report it to us immediately at: security@havn.ai

We take all security reports seriously and will investigate and respond promptly.

9. Updates to Security Practices

We continuously improve our security practices and will update this page as we implement new measures or make changes to existing ones.