Section 1 - Overview

We take all reasonable steps to keep secure any information that we hold about you. Here is a summary of what we do to guarantee your data is safe with Wesurance.

Section 2 - Backups/ Disaster Recovery

• Backups are replicated everyday in the same data centres in order to meet Disaster Recovery objectives.
• Wesurance will keep full backups of each deactivated account for up to 12 months.

Section 3 - Database Security

• All data related to your customer is stored in a dedicated database and converted into unrecognisable code using industry standard data encryption.
• Data access control rules implement complete isolation between customer databases running on the same cluster, no access is possible form one database to another.

Section 4 - Password Security

• Customer passwords within Amazon Cognito is encrypted at rest in accordance with industry-standard.
• Wesurance staff do not have access to your password and cannot retrieve it for you, the only option if you lose it is to reset it.
• Login credentials are always transmitted securely over HTTPS.

Section 5 - Staff Access

• Wesurance helpdesk staff and engineers may sign into your account to access settings related to your support issue in a limited and reasonable manner. They will use their own special staff credentials and not your password (which they have no way of knowing).
• Our Helpdesk staff strives to respect your privacy as much as possible, and only access files and settings needed to diagnose and resolve your issue.

Section 6 - System Security

• All servers are running in the Amazon AWS cloud on a Linux base with up-to-date security patches.
• Installations are ad-hoc and minimal to limit the number of services that could contain vulnerabilities (for example, no PHP/MySQL stack).
• Only a few trusted Wesurance engineers have clearance to remotely manage the servers, and access is only possible using an encrypted personal SSH keypair, from a computer with fulldisk encryption.

Section 7 - Physical Data Location

• The servers are hosted in trusted data centres in various regions of the world (e.g. MongoDB, AWS). They should be closest to where you are based, and you can request a change of region (subject to availability).

Section 8 - Credit Card Safety

• We never store your credit card information in our systems.
• Your credit card information is always transmitted securely and directly between you and our PCI-Compliant payment acquirers (Please refer to our Privacy Policy page).

Section 9 - Communications

• All data communication to client instances is protected with state-of-the-art TLS 1.2 SSL encryption (HTTPS).
• All internal data communications between our servers are also protected with state-of-theart encryption (SSH).
• Our servers are kept under a strict security watch, and always patched against in the latest SSL vulnerabilities, enjoying Grade A SSL ratings at all times.
• All our SSL certificates use robust 2048-bit modulus with full SHA-2 certificate chains.

Section 10 - Network Defence

• All data centre providers used by Wesurance have very large network capacities, and have designed their infrastructure to withstand the largest Distributed Denial of Service (DDoS) attacks. Their automatic and manual mitigation systems can detect and divert attack traffic at the edge of their multi-continental networks before it gets the chance to disrupt service availability.