Ramp security
At Ramp, the security of our customers and their data is of paramount importance. We are dedicated to ensuring that your experience with our products and services is not only efficient and enjoyable but also safe and secure. This page outlines our commitment to security and how we handle various aspects of it.
Infrastructure security
Our infrastructure is hosted by Google Cloud Platform in a secure cloud services platform which is SOC2 and ISO 27001 compliant. This ensures that your data is hosted in a controlled and secure environment, backed by regular audits and assessments.
Data encryption
To safeguard our customers' data, we implement robust encryption measures. Any personal or sensitive information is encrypted during transmission and storage, ensuring that it remains confidential and protected. We employ industry-standard encryption protocols to maintain the highest level of security and privacy.
Secure Software Development Lifecycle (SDLC)
We take a proactive approach to security in our software development lifecycle (SDLC). Our software is designed with security in mind, and we follow a set of best practices to ensure that it remains secure throughout its lifecycle:
Secure Design
Our software is designed with security as a top priority. We follow industry-standard secure coding practices to mitigate risks at the design phase.
Development
Our developers adhere to strict coding standards that include secure coding practices. We perform regular code reviews to identify and address potential security vulnerabilities before they become issues.
Testing
Security testing is an integral part of our SDLC. We conduct thorough testing, including but not limited to:
- Code Analysis: We use static code analysis tools to identify potential security issues within the codebase.
- Penetration Testing: We engage third-party experts to conduct penetration testing, simulating attacks to uncover vulnerabilities.
Deployment
We follow best practices for securing production systems to safeguard against security threats.
Monitoring and maintenance
Post-deployment, we continuously monitor our software for any suspicious activity. Any identified vulnerabilities or issues are patched promptly through regular updates to maintain security.
GDPR compliance
Our vision is to be the most customer-centric company in regard to data protection; to build a place where people can trust how their personal information is processed.
At Ramp, we understand that privacy is important. We respect and value the privacy of everyone who visits our site or uses any of our applications. We only collect and use your personal data as described in our privacy notice on our sites and as permitted by the General Data Protection Regulations (GDPR) and other data protection legislation.
We adhere to follow the GDPR benchmark for all global locations and data protection is embedded at the heart of we do.
Incident management
In the event of a security incident, Ramp has a well-defined incident response process in place. Our teams are prepared to respond quickly and effectively, mitigating potential damage and protecting our users' data.
Reporting issues and vulnerabilities
Your vigilance and assistance in maintaining our security are highly valued. If you discover any security issues or vulnerabilities within our systems or services, please do not hesitate to reach out to us.
You can report these issues by sending an email to security@ramp.network. Our dedicated security team will promptly investigate and address the reported concerns.