Security
How we protect
your data.
Last updated March 1, 2025 · Rankily LLC, Delaware
1. Our Commitment
Security is a top priority. We continuously evaluate and improve our security posture.
2. Infrastructure
Hosted on Vercel, protected by Cloudflare:
●Global edge network
●DDoS protection
●WAF — OWASP Top 10
●Automatic failover
●Private encrypted channels, strict firewalls, DNSSEC.
3. Encryption
3.1 In Transit
TLS 1.2+ on all endpoints. HSTS enabled. Strong ciphers only.
3.2 At Rest
AES-256 for accounts, URLs, analytics, backups. Keys rotated regularly.
4. Payments
Stripe (PCI DSS Level 1):
●We never store full card numbers or CVVs.
●Tokenization — reference tokens only.
●Real-time fraud monitoring.
5. Authentication
5.1 User Auth
●2FA via authenticator app.
●Bcrypt password hashing.
●Secure sessions — HTTP-only cookies.
●Brute force protection.
We strongly recommend enabling 2FA.
5.2 Internal Access
●Least privilege, MFA, logged access, regular reviews.
6. Application Security
●OWASP guidelines + peer review.
●Dependency audits.
●Input validation.
●CSRF tokens.
●CSP headers.
●Rate limiting.
7. Data Protection
●Minimal collection. No selling.
●Data isolation between users.
●Secure deletion.
●Encrypted backups.
8. Incident Response
●Detection: Real-time monitoring.
●Containment: Immediate isolation.
●Investigation: Scope and root cause.
●Notification: 72 hours (GDPR).
●Remediation and post-incident review.
9. Third-Party
●Vercel: SOC 2 Type II.
●Cloudflare: SOC 2, ISO 27001, PCI DSS.
●Stripe: PCI DSS Level 1.
●Google Analytics: ISO 27001.
All bound by DPAs.
10. Your Role
●Enable 2FA
●Strong password (12+ chars)
●Keep credentials private
●Monitor your account
●Update browser/OS
●Watch for phishing
R
© 2025 Rankily LLC. All rights reserved.