Security

Our Commitment

At Profit Leap, Inc., security is foundational to everything we build. cfo.bot handles sensitive financial data, and we treat its protection with the highest priority. This page outlines the measures we take to keep your information safe.

Data Encryption

• In transit: All data transmitted between your browser and our servers is encrypted using TLS 1.2 or higher.
• At rest: Sensitive data stored in our databases is encrypted using AES-256 encryption.
• Secrets management: API keys, tokens, and credentials are stored in dedicated secret management systems and are never hard-coded or logged.

Infrastructure

Our Service is hosted on leading cloud infrastructure providers that maintain SOC 2 Type II, ISO 27001, and other industry certifications. We leverage:

• Isolated network environments with strict firewall rules.
• Automated backups with encryption and geo-redundancy.
• Continuous monitoring and alerting for anomalous activity.
• Regular infrastructure patching and vulnerability scanning.

Access Controls

• Principle of least privilege — employees and systems are granted only the minimum access necessary.
• Multi-factor authentication (MFA) is required for all internal systems and administrative access.
• Access to customer data is logged, audited, and restricted to authorized personnel.
• Role-based access control (RBAC) governs permissions across the platform.

Compliance

We are committed to meeting industry standards and regulatory requirements, including:

• SOC 2 Type II compliance for security, availability, and confidentiality.
• GDPR readiness for customers in the European Economic Area.
• CCPA compliance for California residents.

Incident Response

We maintain a documented incident response plan that includes:

• 24/7 monitoring and automated threat detection.
• Defined escalation procedures and response timelines.
• Post-incident review and remediation to prevent recurrence.
• Notification to affected customers within 72 hours of a confirmed data breach, in compliance with applicable regulations.

Responsible Disclosure

We value the security research community. If you discover a vulnerability in our Service, please report it responsibly by emailing hello@profitleap.com with details of the issue. We ask that you:

• Allow us reasonable time to investigate and address the issue before public disclosure.
• Avoid accessing or modifying other users' data during your research.
• Act in good faith and avoid actions that could disrupt the Service.

Contact Us

For security questions or concerns, please contact us at: