Snapshot 25516
Normalized text
Scripts and page chrome removed; this is what change detection compares.
How Spinify Handles Security Integrated data apps mean you just need to confirm access. Spinify then handles all the syncing, and the leaderboards can be up and running in minutes. How We Protect Your Data Protecting customer data is core to everything we do at Spinify. We design our platform, infrastructure, and internal processes with privacy and security in mind, from the ground up. We know that trust is earned, not assumed. That’s why we’re committed to continuously strengthening our security posture through independent audits, industry-leading encryption, and robust internal controls. As our platform evolves, so does our dedication to safeguarding your data. Security at Spinify isn’t a feature, it’s a foundation. SOC 2 Type 2 Compliance Spinify is proudly SOC 2 Type 2 compliant (also referred to as SOC 2 Type II), affirming our commitment to the highest standards of data security and operational excellence. SOC 2 Type 2 is a leading security framework designed specifically for modern SaaS businesses that manage sensitive customer information in the cloud. It is governed by the American Institute of Certified Public Accountants (AICPA) and evaluates how organizations implement and operate controls related to security, availability, confidentiality, and privacy. What SOC 2 Type 2 Means for You Unlike point-in-time certifications, SOC 2 Type 2 requires independent auditors to assess how effectively security controls are implemented over a defined period, not just whether policies exist, but whether they are actively followed and maintained. Spinify’s compliance with SOC 2 Type 2 assures customers that: Our security controls are tested in practice, not just documented. We continuously monitor and enforce secure processes across our platform. We follow strict access, encryption, and data governance standards, verified by external auditors. This certification demonstrates that our systems and internal processes have passed rigorous, real-world scrutiny, giving your team the confidence to trust Spinify with your most critical data. Scope of Our SOC 2 Type 2 Certification Our audit covers key operational and technical domains, including: Secure software development lifecycle (SDLC) Role-based access control and authorization Data encryption in transit and at rest Availability and uptime procedures Internal risk management and incident response Vendor and third-party risk controls Your Data, Your Control Spinify integrates with your systems to collect rep activity and performance data, helping you drive engagement, recognition, and results. The data required depends on your selected integrations and KPIs, and is intentionally minimal. End-user personal data is not required to use Spinify. Your organization controls exactly what data is shared with Spinify, and access can be updated or removed at any time. Platform Security by Design We follow secure-by-design principles and implement rigorous safeguards to protect your data throughout its lifecycle: Data in Transit: Encrypted using TLS (SSL certificates issued by GoDaddy). Data at Rest: Encrypted using AES-256 within our Amazon Web Services (AWS) infrastructure (US-West region). Zero Removable Media: No printed records or external storage used, per internal security policy. Access Controls: Employee access is role-based and granted only when required for support. Proactive Threat Protection We take a proactive approach to platform security: Automated and manual security testing before every release Continuous scanning with tools like OWASP ZAP and Qualys Development and staging environments are separated from production Code reviews, automated analysis, and quality checks aligned with OWASP best practices Infrastructure & Hosting Spinify is a SaaS platform that is 100% cloud-based and hosted in AWS in the USA. We do not manage or operate any physical servers. Our infrastructure includes: Virtual Private Cloud (VPC) with strict access control lists Logical data separation per organization Session protection with JSON Web Tokens and session integrity checks Disaster recovery and incident response plans with encrypted backups stored in AWS For more information, see Amazon’s Security & Compliance Center. Application Security & Reliability Security is built into every stage of our software development lifecycle: Continuous deployment ensures real-time updates and fast vulnerability remediation. Changes are tested in isolated environments before release. Single Sign-On (SSO) is available. No restarts or manual updates required, Spinify updates automatically. Contact If you have any questions about Spinify’s security practices, compliance standards, or require additional documentation, our team is here to help. Level up results with gamification Add friendly competition to drive motivation and give your team the recognition they crave, all while boosting data and performance visibility to the max! Unlock your team’s potential by making work more engaging with gamification. GET A DEMO Level up your team with gamification Boosting Sales Gamification Performance 9 Sales Metrics Improved by Sales Gamification Gamification Real Estate The Impact of Gamification on the Real Estate Industry Best of Spinify Company Culture Gamification Motivation What Is a Sales Incentive Program? The Complete Guide to Motivating Sales Teams See more