Security

1. Infrastructure Security

Our application runs on reputable cloud infrastructure providers that maintain robust physical and environmental security and their own industry-recognized certifications. We rely on network isolation, segmentation, and managed platform security controls to protect our production environment.

Access to production infrastructure is restricted on a least-privilege basis and protected by multi-factor authentication. We log and monitor system activity to help detect and respond to anomalies. A list of the subprocessors that support our services is available on request at privacy@the7e.com.

2. Data Protection

Customer data is encrypted in transit using industry-standard TLS and encrypted at rest. We use managed key and secrets management to safeguard cryptographic material and credentials, and we design our systems to keep each customer's data logically isolated.

No internet-based service or storage system can be guaranteed to be completely secure. While we implement commercially reasonable safeguards designed to protect data, we cannot guarantee absolute security.

3. Access Controls

We follow the principle of least privilege. Access to systems and customer data is role-based, granted only as needed, protected by multi-factor authentication on internal systems, and reviewed periodically. Access is promptly revoked when it is no longer required.

4. Application Security

Security is built into our software development lifecycle. Changes undergo peer code review, we monitor our dependencies for known vulnerabilities, and we test our application regularly to identify and remediate issues. We apply security patches and updates on a risk-prioritized basis.

5. Business Continuity

We maintain regular, encrypted backups of customer data and have recovery processes designed to restore service in the event of a disruption. We periodically review these processes to help ensure data durability and availability.

6. Vulnerability Disclosure

We welcome reports from security researchers and the community. If you believe you have found a security vulnerability in our services, please report it responsibly to security@the7e.com. We ask that you act in good faith, avoid privacy violations and service disruption, and give us a reasonable opportunity to address the issue before any public disclosure.

We aim to acknowledge valid reports within five business days and will work with you to understand and resolve the issue promptly.

7. Contacting Us

7Environmental Inc.
600 Park Offices Dr., Suite 300
Durham, NC 27713

Security Questions and Vulnerability Reports: security@the7e.com