We prioritize the security of our customers' data.

We employ rigorous security procedures to safeguard your sensitive information. Here are some details about our security measures.

Platform and Access Management

• All our services run on the Google Cloud Platform (GCP), known for its high-security standards.
• Access to the services is restricted to authorized users with cardboard.inc Google accounts.
• All accounts are personal, and we require the use of two-factor authentication (2FA) whenever possible.
• Where supported, we use YubiKey hardware tokens for enhanced security and phishing protection through the use of WebAuthn.
• We do not store or use any passwords in our own applications, but rely solely on Single Sign-On (SSO) for authentication. This means we adhere to your company's authentication policies, e.g. if your company requires 2FA for Google accounts, you will be required to use 2FA when accessing our services using your Google accounts.

Internal Services and Databases

• Our internal services and databases are only accessible within a private network (VPC) and are not exposed to the internet.
• We maintain strict controls to ensure that unauthorized access is prevented and data remains secure within our infrastructure.
• We diligently apply any software upgrades continuously to ensure the latest security patches are in place.

Payment Processing

• Our card issuing partner, Adyen, is a leading global payment service provider known for its strong emphasis on security and compliance. They have implemented advanced security measures to protect your payment card information, ensuring that your transactions are secure and reliable.
• We never store any payment card information. When you reveal the card details in our app, all card data is encrypted throughout the entire process, from our card issuer to your browser, using encryption keys that we do not have access to.
• In the event of any downtime on our end, your payment cards will still function as they rely solely on our card issuer for day-to-day operations.

At Cardboard, we continuously monitor and update our security practices to stay ahead of potential threats. We are committed to maintaining the highest standards of security to protect your valuable information.

If you have any questions or concerns regarding security, please don't hesitate to contact us at hello@cardboard.inc.