Security at Gratavid

Gratavid is trusted by the best organizations and Universities to collect & send personalized videos.

Penetration Tested

We're committed to securely managing the privacy of our clients.

GDPR

We help our clients (both EU and globally) comply with GDPR.

SSO Login

Securely log in to Gratavid with platforms like Google, Microsoft, Okta and more.

Automated Backups

Data backups daily. No customer action is required.

HTTPS/SSL

Industry-standard encryption by default with the Gratavid platform.

Scalable DDoS Mitigation

Gratavid automatically detects and blocks malicious attacks.

Frequently Asked Questions

Is Gratavid GDPR compliant?

Yes. For more information, see our Privacy Policy and GDPR Compliance with Gratavid. No data is stored permanently inside EU regions.

Is Gratavid PCI compliant?

Gratavid does not store personal credit card information for any of our customers. We use Stripe to process transactions and trust their commitment to best-in-class security. Stripe is a certified PCI Service Provider Level 1, which is the highest level of certification in the payments industry.

Does Gratavid encrypt data?

Yes. All data is encrypted in transit (HTTPS/TLS). Sensitive information like access tokens, secrets, and customer data associated with your profile is encrypted at rest (AES-256). Encryption is automatic and no customer action is required.

Does Gratavid backup data?

Yes. Our current backup interval is every day and each backup is persisted for one month. Automatic backups are taken without affecting the performance or availability of the database operations.

All the backups are stored separately in a storage service, and those backups are globally replicated for resiliency against regional disasters.

What infrastructure does Gratavid use?

Gratavids uses AWS, Google Cloud, Twilio/Sendgrid, Vercel, and Algolia. Our data partners are certified for a growing number of compliance standards and controls, maintain ISO 27001, SOC2 Type II certifications, and undergo several independent third-party audits to test for data safety, privacy, and security. They perform regular independent penetration testing and have public bug bounty programs that help us ensure ongoing security.

Does Gratavid conduct regular penetration testing and vulnerability scans?

Yes. We conduct regular penetration testing.

How can I contact the Gratavid security team?

You can email us at security@gratavid.com