Third Party Index

Snapshot 52413

Document
Security page
URL
https://www.bhnrewards.com/security/
Fetched
HTTP status
200
Content type
text/html; charset=UTF-8
Fetch mode
static
Size
307814 bytes
SHA-256 (raw)
d5252572d4be9170fcd2ddb282f6e515b16d1d77078a73633434d00487ca3b83
SHA-256 (normalized text)
8170791d4d8bb38d5125aa879e503383ca68627cd195da8e51c69a250b2566f4

Normalized text

Scripts and page chrome removed; this is what change detection compares.

Security
The security of your data and rewards is a top priority at BHN Rewards.
Every day we ensure that our security reflects industry standards and compliance.
Our Tango platform makes rewarding easy and awesome
Tango is the quick and easy way to deliver digital gift cards, prepaid cards, physical gift cards and payouts to your recipients around the world.
SOC 2 Compliance
BHN Rewards has completed its SOC 2® Type 2 examination. We can provide SOC 2® Type 2 reports and attestations of compliance upon request. BHN Rewards has designed, implemented, and operated its system of controls to meet its service commitments based on the Trust Services Criteria for Security, Availability, Processing Integrity, Confidentiality and Privacy.
GDPR and CCPA Compliance
BHN Rewards recognizes the sensitivity of your personal data. We take holistic security measures to ensure both GDPR and CCPA compliance.
HIPAA Compliance
BHN Rewards can support rewards programs that need to be HIPAA compliant. BHN Rewards has a standard Business Associate Addendum (BAA) we present to customers for signature. It takes into account the services BHN Rewards provides.
Third-Party Sub-Processors
BHN Rewards uses third-party sub-processors to provide various business functions after due diligence to evaluate their defensive posture and executes an agreement requiring each Sub Processor to maintain acceptable security practices.
Physical Security
BHN Rewards employs AWS, the market leader in cloud services to host its services. BHN Rewards leverages the functionalities provided by AWS to build a highly scalable, secure and reliable platform. BHN Rewards employs serverless technologies administered by AWS, eliminating the need for BHN Rewards to manage and secure servers. The serverless technologies allow BHN Rewards to scale seamlessly to handle millions of customers
Secure Platform
Servers and Networking
BHN Rewards employs serverless technologies provided by AWS. Patching and virus protection of the servers on which BHN Rewards’ application run are also managed by AWS. Additional managed services that we utilize, such as Amazon RDS, S3 and others, are comprehensively hardened AWS infrastructure-as-a-service (IaaS) platforms.
Storage
BHN Rewards stores data such as metadata, activity, original files, and customer’s data in different locations while also compiling and generating documents when requested. All data in each location is encrypted at rest with AES-256 and sophisticated encryption keys management.
Coding and Testing Practices
BHN Rewards leverages industry standard programming techniques, such as having documented development and quality assurance processes, and also following guidelines such as the OWASP report, to ensure that the applications meet security standards. Security testing is part of our release testing, and BHN Rewards performs routine vulnerability and penetration testing every 6 months.
Employee Access
We follow the principle of least privilege in how we write software, as well as the level of access employees are instructed to use in resolving issues in our platform and responding to customer support requests.
Isolated Environments
The production network segments are logically isolated from other Corporate, QA, and Development segments.
Customer Payment Information
BHN Rewards uses external secure third-party payment processing and does not process, store, or transmit any payment card data.
System Monitoring and Alerting
At BHN Rewards, the production application and underlying infrastructure components are monitored 24/7/365 days a year, by dedicated monitoring systems. Critical alerts generated by these systems are sent to 24/7/365 on-call DevOps team members and escalated appropriately to operations management.
Service Levels and Backups
BHN Rewards’ infrastructure utilizes many layered techniques for increasingly reliable uptime, including the use of auto-scaling, load balancing, task queues, and rolling deployments. BHN Rewards’ database servers are stored in geographically redundant sites providing maximum availability and minimal data loss in the event of a disaster. Databases are backed up on a regular basis and backup copies are maintained in geographically redundant locations. All backups are encrypted using AES-256 encryption technologies.
Vulnerability Testing
Web application security is evaluated by the development team in parallel with the application release cycle. This vulnerability testing includes the use of commonly known web application security toolkits and scanners to identify application vulnerabilities before they are released into production.
Application Architecture
The BHN Rewards web application is multi-tiered into logical segments (front-end, mid-tier, and database), each independently separated from each other in a DMZ configuration. This guarantees maximum protection and independence between layers.
Incident Management
BHN Rewards has a documented incident management plan to respond to security incidents. The plan highlights the processes to follow in the event of a security incident, covering customer notifications, escalations within the company and recovery of business operations after an incident.
Business Continuity and Disaster Recovery
BHN Rewards’ business continuity and disaster recovery plan implements steps necessary to ensure minimal disruption of services in the event of a disaster. To minimize disruption, BHN Rewards’ infrastructure is hosted on world’s leading cloud platform. BHN Rewards employs warm stand-by in geographically diverse locations so that service can be restored in a different location in a short period of time if the primary location is impacted. Live database replication to geographically redundant locations allows BHN Rewards to minimize data loss, and reduce recovery point objective (RPO) of less than a second.
© 2026 COPYRIGHT BHN REWARDS
PRIVACY POLICY
TERMS OF SERVICE
SECURITY & DATA PROTECTION
You are being redirected to
Tango is BHN’s easy platform for fulfilling reward programs for businesses like yours. Click “Continue to Tango” to signup for your free account and start sending now!
Continue to Tango
Talk to us First
Continue to make a BHN Rewards account