Security Policy
CareersHeights ("CareersHeights," "we," "us," or "our") is committed to protecting the security, confidentiality, and integrity of all personal information processed through www.careersheights.com (the "Platform").
This Security Policy reflects the combined security controls of:
Base44.com
Development & Deployment
IONOS.com
Hosting & Infrastructure
CareersHeights
Application & Operations
Together, these layers ensure a secure environment for Users and Experts.
1. Security Framework Overview
CareersHeights' security posture is built on three layers:
1. Base44 Development Security Controls
Base44 provides the secure environment where our platform is developed, tested, and deployed. This includes:
- Secure development pipelines
- Controlled access to development tools
- Code integrity protections
- Environment isolation
- Continuous monitoring of development systems
2. IONOS Hosting & Infrastructure Security
IONOS hosts the live CareersHeights website and provides:
- Secure data centers
- Network firewalls
- DDoS protection
- Redundant infrastructure
- Physical security controls
- Server level monitoring and patching
3. CareersHeights Application & Administrative Controls
We implement:
- Account security
- Encryption
- Access controls
- Monitoring
- Incident response
- Data protection practices
These three layers work together to protect your data end to end.
2. Technical Safeguards
2.1 Encryption
- All data transmitted between your device and the Platform is encrypted using HTTPS/TLS.
- Sensitive data stored by third party providers (e.g., Stripe) is encrypted at rest.
2.2 Secure Hosting (IONOS)
IONOS provides:
- ISO certified data centers
- 24/7 physical security
- Redundant power and cooling
- Network level intrusion detection
- Automated patching and updates
2.3 Secure Development (Base44)
Base44 ensures:
- Controlled developer access
- Secure code repositories
- Version control integrity
- Automated vulnerability scanning
- Secure deployment pipelines
2.4 Application Security (CareersHeights)
We implement:
- Password hashing
- Session management
- Rate limiting
- Input validation
- Regular code reviews
- Monitoring for suspicious activity
3. Data Storage & Retention
- Data is stored on secure IONOS servers.
- Development data (if used) is stored securely within Base44's environment.
We follow our Data Retention Policy, which includes:
- Limited retention periods
- Secure deletion
- Encrypted backups
- Anonymization where appropriate
4. Cross-Border Data Transfers
Some data may be processed outside Canada by:
- IONOS (depending on server region)
- Stripe (payment processing)
- Base44 (development infrastructure)
We ensure all providers meet industry security standards and comply with PIPEDA requirements for international transfers.
5. Payment Security
Payments are processed by Stripe, which is:
- PCI DSS compliant
- Responsible for encrypting and tokenizing payment data
- Independent from CareersHeights' servers
CareersHeights does not store full credit card or banking information.
6. User & Expert Responsibilities
Security is shared. Users and Experts must:
- Use strong passwords
- Keep login credentials confidential
- Avoid sharing sensitive information outside the Platform
- Report suspicious activity immediately
Experts must handle User documents securely and confidentially.
7. Incident Response
If a security incident occurs, CareersHeights will:
- Investigate promptly
- Contain and mitigate the issue
- Notify affected individuals where required by law
- Coordinate with Base44 and IONOS if infrastructure is involved
- Cooperate with regulatory authorities
8. Monitoring & Logging
We use monitoring tools to detect:
- Unauthorized access attempts
- Suspicious login patterns
- System anomalies
- Abuse or misuse of the Platform
IONOS and Base44 also maintain their own monitoring systems.
9. Continuous Improvement
We regularly update our security practices through:
- Infrastructure updates from IONOS
- Development security enhancements from Base44
- Internal audits and reviews
- Industry best practices
Security evolves, and so do we.
10. Reporting Security Concerns
If you believe you've discovered a security issue, contact:
We investigate all reports promptly.
11. Changes to This Policy
We may update this Policy from time to time.
When changes occur, we will:
- Update the "Effective Date"
- Provide notice for material updates
Continued use of the Platform after updates constitutes acceptance.
Your Security Matters
We take security seriously. If you have questions or concerns, please don't hesitate to reach out.
info@careersheights.com