Data Security and Infra

Discover how Gallabox prioritizes data security with a multi-layered approach, including infrastructure, access controls, encryption, and auditing, to safeguard customer data integrity.

In the rapidly evolving digital landscape, data security remains a paramount concern for any software products. Gallabox solution adheres to the highest standards of data security, ensuring the integrity, confidentiality, and availability of customer data. This section outlines our robust approach to securing data across various dimensions of our product.

Advanced Role-Based Access and Audit Controls

• Two-Factor Authentication: Adds an additional layer of security for user authentication.

• Granular Role-Based Controls: Implements team-based and channel-based access with features like phone masking.

• Internal Restrictions: Ensures data is not accessible outside the organization.

• Exhaustive Audit Logs: Keeps detailed records of all data interactions.

• Controlled Troubleshooting: Allows troubleshooting only with approved access.

Secure and Scalable Hosting Infrastructure

• Scalability: Supports both horizontal and vertical scaling for consistent performance.

• Advanced Cloud Infrastructure: Implements cutting-edge cloud infrastructure and data security principles.

• Role-Based Authentication: Ensures data is accessible only to authorized personnel.

• Secure Data Downloads: Data extraction is controlled and requires necessary approvals.

• Integration Flexibility: Offers various secure integration models, including HTTPS.

• Containerization: Utilizes Docker for secure and efficient application deployment.

• Inbuilt Security in AWS and MongoDB Atlas: Leverages inherent security features for enhanced protection.

Enhanced Data Security Measures

• HTTPS for Secure Communication: Utilizes trusted, auto-renewable certificates for HTTPS integrations.

• Encryption: Ensures all data is encrypted in transit (TLS 1.2/1.3) and at rest (AES-256)

• Authorized User Access: Restricts data viewing to authorized users on the Gallabox Web/App Console, additionally we enforce Multi-Factor Authentication (MFA) for all users

• Role-Based Data Access: Implements client-defined, authenticated roles for data access.

• Database Security: Limits database access to approved IPs within the VPC.

• Audit Trail: Maintains detailed logs of all data access and modifications.

Robust Backup and Recovery Infrastructure

• Geographic Distribution: Backups are distributed across multiple zones, with a primary data center in the US.

• Continuous Backup and Easy Restoration: Offers 2-hour continuous backup and efficient one-click data restoration.

Secure Source Code Management

• Private Repositories: Manages source code in secure, private GitHub repositories.

• Two-Factor Authentication: Requires this for all contributors' GitHub accounts.

• Regular Key Rotation: Periodically rotates SSH keys and Personal Access Tokens.

• Strategic Release Management: Employs well-defined branching strategies for controlled releases and rollbacks.

• Continuous Integration: Uses Jenkins for continuous integration and code audits.

Data Security Controls

Gallabox follows industry-standard security practices to ensure the protection of customer data. We have implemented multi-layered security controls across four key areas:

Predict (Proactive Risk Assessment & Monitoring)

✅ Penetration Testing – Periodic tests to identify vulnerabilities in applications & infrastructure ✅ Security Audits – Annual audits for compliance, we are in-process of getting SOC 2 and GDPR compliant

In-Progress:

✅ Risk Assessments – Regular security risk assessments & threat modeling

---

Prevent (Prevention of Security Incidents)

✅ Access Control – Role-Based Access Control (RBAC) & Least Privilege Principle ✅ Multi-Factor Authentication (MFA) – Enforced for all user accounts ✅ Data Encryption – AES-256 encryption for data at rest, TLS 1.2/1.3 for data in transit ✅ Firewall & Network Security – Cloud-based Web Application Firewall (WAF) and VPN restrictions ✅ Secure Software Development (DevSecOps) – Code security reviews, secure API practices, and CI/CD security integration

---

Detect (Real-Time Threat Monitoring & Logging)

✅ Security Information and Event Management (SIEM) – Logs all security events for anomaly detection ✅ Endpoint Detection & Response (EDR) – Protects against malware & insider threats

In-process

✅ Intrusion Detection System (IDS) – Monitors network traffic for suspicious activity ✅ Cloud Security Monitoring – Continuous monitoring of cloud workloads for unauthorized access ✅ Automated Log Analysis – Real-time alerts for potential data breaches or security violations

---

Correct (Incident Response & Recovery Mechanisms)

✅ Incident Response Plan (IRP) – 24/7 security team for rapid incident response ✅ Data Backup & Disaster Recovery – Regular backups with geo-redundant storage for data integrity ✅ Forensic Investigations – Root cause analysis for security incidents, followed by corrective action

In-progress:

✅ Automated Threat Mitigation – AI-driven security response to mitigate risks in real-time ✅ Breach Notification Policy – Any security breach is reported within 48 hours per GDPR guidelines

---

In summary, Gallabox is fortified with a multi-faceted approach to data security, encompassing robust infrastructure, stringent access controls, comprehensive encryption, and proactive auditing and recovery measures. These practices collectively ensure the security and integrity of our client's data, making our solution a reliable and trusted choice in the market.