Snapshot 50207
Normalized text
Scripts and page chrome removed; this is what change detection compares.
About ChargeOver ChargeOver offers subscription billing and recurring billing management solutions for businesses across many industries.ChargeOver takes data security very seriously. We understand that you're trusting us with your data, and we do everything possible to keep that data secure and continuously look for opportunities to make improvements. As an overview: House all of our servers in secure, US-based data centers. Filter all incoming and outgoing traffic through hardware firewalls. Do not utilize wireless access at all within our network. Store all possibly sensitive data encrypted on our servers. Only allow incoming connections into our network via industry-standard SSL/HTTPS encrypted sessions. Regularly run penetration-testing exercises and vulnerability-checks against our network. Track and monitor incoming and outgoing connections extensively.Utilize industry-standard 256-bit encryption for all SSL connections. Perform weekly, ASV-certified security scans/audits, internal and external network scans, and other PCI compliance checks. PCI Compliance - Level 1 Service Provider ChargeOver is certified as a PCI-DSS compliant Level 1 Service Provider. The Payment Card Industry Data Security Standard (PCI DSS) is a set of policies and procedures that have to be followed by the organizations that process, store or transmit card data. The PCI Security Standards Council is governed by the five major payment card brands - American Express, Discover Financial Services, JCB International, MasterCard, and Visa Inc. Attestation of Compliance / Report on Compliance documents are available on request. Monitoring We utilize both internal and multiple external monitoring services to monitor ChargeOver. The monitoring systems will alert both operations and security team members through sms, pager and phone call notifications if there are any errors or abnormalities in application state. Disclosure We’re continually working to make our system secure. If you find any security issues, please submit it to [email protected]. Security is our highest priority. We will make sure the issue is fixed and updated as soon as possible. PGP Key By default, we provide a PGP key to encrypt sensitive communication that you send to us. -----BEGIN PGP PUBLIC KEY BLOCK----- mQINBF3wBTkBEAD1Zfv/te07xtb23ZimKK5BCZC5QsDueoqcTvekPaL+93aEpgeE 32sZOHFVOtDXn5+RQyVeuHDo/oR1pI1zYNkYqmfROF4FnIsW7iBlsRmJKieDZBjs P4WGYUqpt7AhRsrXheEKhxt4ju8J7x49+wpDTwN8ILbrZ8c8MBBOxgdvMqB4ifZO Btbb+KOs9dP4nem/vSCRdtE9X9IgrdbycCxE7SmD0FOvjPC9zBzSklXLbxVoHwHj /i0u101ApUH0HTdtyYbgGEZkPYicu+orAxw3oJu80aytWO59ror8BafcGG158RRV BZW/J3otyVm7HBG/QAIAM7bX0Xsb8UMy+iKQjq5W/FOEOQMI+xWoA3kzf/1FReVK 4jRIhEIW2n90P9fqx4ukGh905aNCagkqpbpPztNrBZ8UFg4nfLp6ldq2EHMmqji8 PeTZTXJbKkW5PR3Ni0BhODNDKSdpX/7CCg3ytBPqLGVXr+fSI/Yvsmqo+wVz0cRb wms64DdM6XeKy1ji9aSeIlPUZ9H3SaubRkztbFS8uIYaHWIgGbmhU/tgk4hLGGyt 5BZLud3CRogLm8v0UYfEEYxjWzpBbekY/0bCYCnIVEiVjaSw1bFZn84B0NAzhEKR JO/jlObLS6yPTmGSoArIpDwor8IMn5I7uMRxrZDxzt784uBimLQLRpKh/wARAQAB tC1DaGFyZ2VPdmVyIFNlY3VyaXR5IDxzZWN1cml0eUBjaGFyZ2VvdmVyLmNvbT6J AlQEEwEKAD4CGwMFCwkIBwMFFQoJCAsFFgIDAQACHgECF4AWIQSk1g3MYhT/HF5D 341SCfAvKVvF8QUCZ2BJ3QUJDTKrpAAKCRBSCfAvKVvF8eeSD/sHhd6qjePchn2C TmLhUCQ9djP6+h+37qVbapJPOHwOGP386ADfXD/sw958dY2UeTx/lzVBXYtMwu+J GMaB1TDFuF6Ak8VxiVpK6tT1+TjB1DrGRuGfnV58zMKdr/dxEhMLk/o2XdNJ/sM6 ghYSmvuf+TdsnenZVF92VwnlrEt/ysXR3v46MN22mzvkYzp8Gd5fLifzEyc4bmuL V0eN9H3qL6G7nKMIr8njAKh/nfyArL44YEab1H2K0hMi6Yv4ZQxTD3pORMR4sgjQ k1ORl2xpw4sa4h6xt9CheYJyx4shICVTVuj9BqVT5fJqDqjgqK7BEtfypWzyDilK i/smbVPpN6rz1AwIzNqnkZu0UKWg6aLhOV+6t9BvetNp5vmXSWk8Xf9vFDkHoGsk nqazXEWjSGR4M8jbM9ISJo1WbjV6IyXPBLC4wlsNFZf9pm7JRJkOtPHwcpGwS/EL HDJkepgNOWyYb+6rymh1FYOOMpHYm8DBF3qhDcqemWUzz7xIXR2/kWcdGk+in5Nd WtbzieWqoFEWdimRELFrPJ5KF9kL6UHUxgewYIJkA/xQZW2Oc+LOLFW1fZNk9oBo fxq+rFKipermo25hon+p3kRaknSsvuuwiwI7/A7lmHzbfNd5bBNz7y9f74l8sSAW lWliDRQVR6jqNfuFlpdFsHfPSTwWJIkCPQQTAQoAJwUCXfAFOQIbAwUJAeKFAAUL CQgHAwUVCgkICwUWAgMBAAIeAQIXgAAKCRBSCfAvKVvF8f/mEADfcg4RMqB9NE2T h0IAEiLRlH524x2/+n0AfBnt2KJ1dX9jv9Vsu26CMq3soeXP1fCcT/QhfVCkMDGU gIhKsrNXuH7/OJA0s8NDRL/dDMMUmmJ0abiAsnCLtAG1odtXrSRfT2YFZA4Du1vX c48Q/tZSv/OOMVK1xWitkry3ek4YSiTVFhqE6L0wgcm6DeuXltd+HIo5Q3WlCWM7 O5v/p3VdBk4/lHu2D7Sv/nHbv+bUaA6iogil7KXpI50WI7/Y9bbPqnPlEjjg0e75 /rSQ6tE0T1qwGNGPpf2ctPu9TJ7YCRGIAy2iBacuKGyW5BRSUCA4Cz9L9TAD29L5 YHI17Jd4Pbz9QcQFEaCqHrmMz0l7bWlC9+eb1rQSO4RGIybiFa+ThBPp20reIAFH J9jQKxM8vzNdzNdnY7U2pcDwW69hLN4HAf1VxKAp6Jm6ebeU4UVHNUpaAV6v3nAP LDPmRzWi1iDI1pIQ9fPQpJDhh591x6JGRnXTnsjtyRtlEZPCTaTZBzQ1ktDK05Hg rq5+NMnPj4nvclYBatqagmIDHKc8/j6rc6HTQnxdgrVlnTQMWWN7PEndyOGCLXmA PiYKsqi7BUbZUIPIJ/H2b4wA/Pgc0qF2032ko9b0b6zlMDKlNkT+taMKaoSjK5pb L8FQbkZb09o7pL6F87OTxATCIOZ2sokCVAQTAQoAPgIbAwULCQgHAwUVCgkICwUW AgMBAAIeAQIXgBYhBKTWDcxiFP8cXkPfjVIJ8C8pW8XxBQJhsM51BQkHjWj4AAoJ EFIJ8C8pW8XxuCwP+QGLeDvmn2QoYTlOoq/L+z8q9zqC9zi1wOOgzt+OEmwQSmrB YBI50Dhvc1myPgDRYiE3RI3Vqb+JC76igTG6xZNqeJJaa56paXI2gZ0hh7oj2MXv P/BPyjNCr1Z8TBp6Ufb1dSo+bpbl/wugbKNbW8D4enP+mrS05XGnIs6VTO9Vora7 mfcbJvndlr7cxSWsgd3o7gTpK5rB4o6av1muvkyiHsfJVxJtMIV7lL6Q7pmwHiHl UHVYCEYRJQaGcs7XsboirABVzBFFR4tem9f3cFOm+oSIpXoovJPg0Ou+Lbr33WQ/ gjHULw9g+0AtQLddb2lODrf5z2L/7qqmA3BQLT0uF5RZMsND6sLhJgAbmMaOZBRJ 1YysBzRddi2nOmcPEV0AiVjpNHnlSPET2HNNR3Vi/uvp7vOYhogbpNW26v8biFMb LVUHqddUGrcSAOk9SJIOsAMKG0+YkB3qqC+YYUcbacj35wzqjAI5Gttgpoj94P3a HUhllxDYYYDSUR/V1IMD5VlUejfF4PsEdp40XVNy7Z7UcrRJUT4Uqjtv+IMqrltP nTif8xDkEQRsCpBQqjrrfmkufMZDIiK6ro6vDmfkfOnH/XIx+X6iFOZjrFgwcrfz Zood05yMmfjCZFY7I6/7Y5ruV1BDja9lpMi6yD/8nj7kn6NsnrZyV6OWDv5CiQJU BBMBCgA+AhsDBQsJCAcDBRUKCQgLBRYCAwEAAh4BAheAFiEEpNYNzGIU/xxeQ9+N UgnwLylbxfEFAl/aGgEFCQWsNXgACgkQUgnwLylbxfFBSQ/7B4skxHdYv2F+irBQ 1X0zUimUS0WOcKINHBBr+M5Qq03uKqtJaS4NNARyA3IsJx1o9/JdLO1vwRPrNrMi QTGzL7JXnW2gAyRnf3U6DjnAfbGfpF7VGIH38UTcOpR6ayAhIVe3b95P9wkmVsUJ otevYqJi3W73VHVnUjRbz2CCocE/eSAFXSVTQqj3AytJzsWHn29fF0dLrFbLoiw1 FarqfOqXDXRbtiu1xeQGcfw07ggYMKOBxl8o7HlT+sssGP/YTCkWuJNY0xvwtTk3 Q5GmOPM6RpSKOqEmun05cnox6AiuABCPMI19Ph4VukO1JZ0chA0lXY10S99qB4vf tuiynBrKJvnYTjWuG9VPwif5uMOt7wD1si31uKISHQvrGTk5eUGPmj6A/falAI3M Nz2/if+/dkbBChHNW3TE+0lSu7u5GRTmto+DeagWvmeXFIU6G1xHzfNHSPevOgeX hk3ktGqQRsOz/n09e4jbJcH/PJWUAaUvPOQ78Vhje9RFH8Ch60neBRSz5oFiTNuR x/Nas7H3klBBy+I7yzYqwlMm8ir9OH9VtOsU49riwpkI8rq2Eo4tJS2nFwJlem2e 8GNZ7l0p4bczzNdE8iM1mSdIuHDaBL30WSvr/a5MS2YUYad+ML2WFfB2CgbZsfu1 RW2s9UfjOojNKqrcIAZTc7D402e5Ag0EXfAFOQEQANHHa11K7Goql+UMeLRKL3Ti wgFZKygx75I/lqxFwLAgNbfN66ktfv3fJ66X3bFnd7Nsy2WzRNlv8DTs4bOduNRf cGEnLI5fHHmdYojPqXhWxM1SxvtsWMY03igvwGUnEzeAsAtoTtblycVTJiWyIrPs zbeICpfVxTqo80bvLLBpkFrS5wReR+ycsXJr0I4ImTSs/r53x31mzneUsVfO39GV NXTHaM+aDOF+a6Fx8yzTwpzNvSvfBFl1YzF8iHKNunCvhskLlbg4nlVchpNiU9CP QsUFesHbQP8qt1P1CeCq3k9T1cHHQDmSOMBiHNPwHUfWvrExTgC/R0uwhwr9iPRB KuWyQCqCX6E5WwfcOlSLJFVX5rrAH0bj1JtxZG2wYlE7av1VqgDyFJQhF6IhCez9 FGFj3t9w0A2+4YF82YM68lWUivzyXY+tUsujFix2uFjpGm76D86/isJjzSSKS1K5 bPWtnb1x9eE4EqkFqF9NbFpSnMEZb9AiPxUW6hyE9AmOOMtIK3iwDStbkV6LKBHj zClzNzirD9F+rDt9SvCSgJGdXtcuSWEJXjSh2UtqL2++RUx5zpEjlzlR22ODWS+K unf2SIqC6pTPuhsroDA4mLn/1Zj8kjFvH0RCdONmboY0t3psyKiszL7eZ60Jjx4Q 5zsk8yOjTGJe3LSoH7dJABEBAAGJAjwEGAEKACYCGwwWIQSk1g3MYhT/HF5D341S CfAvKVvF8QUCZdkMTgUJC6tuFQAKCRBSCfAvKVvF8d2uD/4tw9UoBF94IZl5Vjlv wY46sV15Eidp2hQD3Ml2N9N1ygciRa3dJgWGH8yAIr04I6QN7Vpzh7vJcxbIaIVG HAsX1GNe6wh/pAtgkHvZqhT49zITmIk7PUYLZ4MMKd8T/C8RoU+pQunC1orDqtcm JkLP6VtrvYTvTxhn37PyaagDMkJSaLM4K6s+9haqn3Un7fswZUZB18ceVWZNaUPE 4br9RujNfQjx9b4A/gZ+IIsEO7quVpq09P+yQ67wuTi2qT1QpGcQTegKTQ9FglHv PEFGN57luOLTqmcbQpxh6RJ2DzNQaG1TNJh7upybfzzJsa6ojIq0t7qzYNPalqs2 cSnp3/udgECxeMatGf3wBtmIOfcVMe/a5A/kxZvlzal5YMk/atfEE+w7R5P515oQ CORy3C2In9gK0tJkdzRQxHt94WG2JCGtF/y3EHZDWZvu+ZroUcyVN/Vskk/ZqQNT vQShCOwAUOY5kfantMj5KrQ+Tw1tGz+dl+ZHt+UGFmpHtHpxttcHJdYv1WXP7wmd jEUwsecsvlyFXU+Q1ImiILSofBaF2J9agwPqex62r7eubU9DeraPrTI9c8piLuHw n5jQ/VygHtvKf2xh16G50jFISzed79mSFX6UGKe43OWTFl0mSAA8P845PuryKaQe pjIohaxugDltMxYsrznY0QjAtA== =PiXV -----END PGP PUBLIC KEY BLOCK----- Key Id: 295BC5F1 Type: RSA Key Size: 4096 User Id: [email protected] Fingerprint: A4D6 0DCC 6214 FF1C 5E43 DF8D 5209 F02F 295B C5F1 Expires: 2026-12-16 Vulnerability Scanning & Patching Data Security The following data is encrypted at rest within ChargeOver (there may be other data that's encrypted at rest as well, but at the very least this much is): ACH bank account numbers, routing numbers, name on the bank account, bank account address information Configuration data (e.g. how you have configured ChargeOver) API and webhook credentials and settings (webhook URL, API public/private keys, etc.) SMTP/Sendgrid/Mandrill/Mailgun credentials Credit card numbers, name on card, credit card address information, client-side encryption tokens, client-side encryption options, Payment gateway credentials and tokens Integration credentials and configuration (includes any API keys, etc. entered for integrated applications)