Security & Privacy

How we ensure reliability and product security:

• Rodeo enforces a password complexity standard and credentials are encrypted when stored in the database

• We leverage world class authentication functionality by using the OAuth 2.0 protocol for authentication

• We monitor all incoming traffic and block any malicious traffic automatically

• We have an average uptime of 99,9% . Any system related issues are reported and updated on our status page

• We utilize Google's global network, ensuring the fastest and most stable infrastructure for our platform

Our network and application security measures:

• All requests to Rodeo are encrypted using a 256 bit encryption and utilizing SSL/TLS. This ensures data cannot be read by third parties

• Rodeo was built with disaster recovery in mind. All our infrastructure runs in at least 2 instances. Automatic disaster recovery ensures that a new instance is initialized when one of the instances crashes.

• All Rodeo services and data are hosted in Google Cloud Platform (GCP) facilities (eu-west1) in Europe

• All our infrastructure is within our own Virtual Private Cloud (VPC) that prevent unauthorized requests to our data or servers

• Every two hours a backup is made of all data in our databases. Database backups are retained for up to 12 months

• We perform detailed security audits every quarter by an external specialized company on our application and infrastructure. Executing thorough PEN tests including assessment of OWASP10 vulnerabilities

The security measures we take at Rodeo:

• Rodeo implements a protocol for any incidents which includes escalation procedures and post mortems. All employees are informed of those policies. More information on the matter can be found here

• We only work with trusted partners that have ISO, SOC2 and PCI compliance

• No elevated permissions are given by Rodeo offices to avoid social engineering

• We have Single Sign-on (SSO) and 2-factor authentication (2FA) and strong password policies for all our internal systems and applications such as Google and GitLab.