We take security seriously

BSI Certificate

Feefo proudly holds the BSI Certificate ISO 27001, a globally recognised standard for information security management systems. This certification validates our adherence to stringent security practices, encompassing risk management, data encryption, access controls, and ongoing monitoring. By aligning with ISO 27001 standards, we reaffirm our dedication to safeguarding your data with the highest level of diligence and professionalism.

Access Control

Feefo employs Identity Provider Single Sign-On (IDP SSO) combined with Multi-Factor Authentication (MFA) to fortify user authentication processes. With IDP SSO, users can securely access Feefo's platform using their existing credentials, reducing the risk of password-related vulnerabilities. Additionally, MFA adds an extra layer of security by requiring users to verify their identity through multiple factors, such as passwords, biometrics, or token-based authentication. This robust authentication mechanism ensures that only authorised individuals can access sensitive data, further bolstering our security infrastructure.

Encryption

Whenever your data is transferred to or from Feefo through a browser or API call, everything is encrypted and sent using HTTPS. Within Feefo’s private firewalled networks, data is encrypted using Transport Layer Security (TLS). All files uploaded by you to Feefo are stored and encrypted at rest using AES-256. All of the data that we store, including within databases and back-ups, are also encrypted at rest using the same encryption algorithm.

Regular Audits and Assessments

We make sure our software infrastructure is always fully up to date with the latest security patches. It is also hosted on a virtual private cloud which is protected by firewalls and monitored. We protect our services from malicious attacks and distributed denial of service attacks (DDOS) by using web application firewall technologies.