Third Party Index

Snapshot 17940

Document
Security page
URL
https://www.pipefy.com/security/
Fetched
HTTP status
200
Content type
text/html; charset=utf-8
Fetch mode
static
Size
398524 bytes
SHA-256 (raw)
c3b44dff696074ebcdea2209a1f046acde7002a9f6c53c338cf7093f169d2582
SHA-256 (normalized text)
863108cf7fc0d1b1570c7002e2369bef52ee0732e4f5e514698364cdecff87dd

Normalized text

Scripts and page chrome removed; this is what change detection compares.

Pipefy is recognized by Gartner® for its no-code agent builder capabilities
Learn more
Security
Count on Pipefy to keep your data protected
Pipefy keeps your organization and personal data safe while you build automated and efficient workflows. Improve your processes with confidence on our secure platform.
Trust Center Key Features
Compliance and security are our number one priorities
As a company focused on your data security, Pipefy complies with Information Security best practices to make sure all of our environments are secure. We ensure a safe and secure solution by having a dedicated security team, constant security training, and regular internal and external audits. Contact our compliance team to learn more about Pipefy's certifications and compliance atestations; and our security team for technical consultations.
Security and Legal Content
Privacy Policy LGPD Commitment GDPR Commitment Terms and Conditions Trust Center
Key Features
Product Security
Network & Application Security
Additional Security Features
Report vulnerability
Abuse Prevention
Product Security
SSO & 2FA
Use Auth0 Single Sign-on (SSO) to authenticate users without requiring additional login credentials. If you are using password-based authentication, Pipefy also allows you to turn on 2-factor authentication (2FA).
Password Complexity and MFA
Pipefy requires password complexity, following market standards. We also protect credentials using a high cryptographic solution.
Uptime
Pipefy has a 99.9% or higher uptime, which shows our product’s high availability.
Permissions
Set permission levels to high or low privileges, managing what each user can see, edit or change inside your organization’s environment using flexible role profiles. Use your Identity and Access Management or Active Directory tool to manage all company users from a centralized application.
Network & Application Security
Storage and Data Hosting
Pipefy hosts services and data in Oracle (OCI) facilities (US) in the USA.
Disaster Recovery (DR) and Fail Over
Pipefy has a disaster recovery plan for high availability. All infrastructure and data are spread across OCI availability zones and will continue to work without issue if any one of those data centers fails.
Back-Ups and Monitoring
Pipefy produces audit logs for all activity on the platform, using LogFy for analysis and S3 for archival purposes. We have active monitoring and backups in place to recover the information if anything happens within our environment.
Encryption
All data within Pipefy is encrypted in transit and at rest using 256-bit encryption, which provides a better and more secure service.
Permissions and Authentication
Access to customer data is limited to authorized employees only. We ensure Pipefy’s environment is protected by having Single Sign-on (SSO), Multi-Factor Authentication (MFA), and strong password policies on our code repository, our email provider, and OCI. Pipefy’s platform, developers’ site, and help site are delivered 100% onto HTTPS.
Pentest and Vulnerability Scanning
Pipefy uses third party security tools to continuously scan for vulnerabilities. Our dedicated security team responds to issues raised on these scans, when applicable, and performs regular penetration tests on the application and infrastructure.
Incident Response
Pipefy has a protocol for handling security events which includes escalation procedures, rapid mitigation, and postmortem. All employees are informed of our policies.
Additional Security Features
Training
All employees complete Security and Awareness training annually. The engineering team constantly goes through security development training.
Policies
Pipefy has developed a comprehensive set of security policies covering a range of topics. These policies are updated frequently and shared with all employees.
Check out the Pipefy Integrated Management System Policy.
Confidentiality
We respect your data and information, all of our employees sign confidentiality agreements.
Report Vulnerability
No technology is perfect.
Pipefy's security team believes that working with skilled researchers worldwide is crucial in identifying weaknesses in any technology. If you think you've found a security issue in our product or service, we encourage you to notify us.
We welcome working with you to resolve the issue promptly.
Security Hall of fame
Submit Vulnerability Report Talk to Security Team
Questions?
Contact us with questions, compliance inquiries, or to report security vulnerabilities
Talk to security team
Abuse Prevention
Pipefy has a strict anti-abuse policy. We don’t allow spam and don’t want you to feel harmed by someone using our system.
If you have been spammed or abused in any way as a result of using Pipefy, please contact our team through our anti-abuse form. Pipefy’s Security team will be pleased to investigate and solve the issue. Our mission is to keep you and your data secure.
Learn more about our Privacy Policy.
Get started today
Build an efficient, seamless, and secure end-to-end operation with Pipefy
Try Pipefy for free
Book a Demo