Back to Home

Security at MoonTrack™ ATS

We take the security of your data seriously. Learn about the measures we've implemented to keep your information safe.

End-to-End Encryption

All data transmitted between your browser and our servers is encrypted using TLS 1.3. Sensitive data at rest is encrypted using AES-256 encryption.

SOC 2 Readiness Program

We maintain SOC 2-aligned controls and continuously collect implementation evidence as part of our independent assurance roadmap.

Secure Infrastructure

Our infrastructure is hosted on enterprise-grade cloud platforms with 24/7 monitoring, automatic backups, and disaster recovery capabilities.

Access Controls

Role-based access control (RBAC) ensures users only access data they're authorized to see. Multi-factor authentication adds an extra layer of security.

Vulnerability Management

Regular security assessments, penetration testing, and automated vulnerability scanning help us identify and address potential threats.

GDPR Compliance

We comply with GDPR requirements, giving you control over your personal data including the right to access, correct, and delete your information.

Reporting Security Issues

We value the security research community and welcome reports of potential security vulnerabilities. If you discover a security issue, please report it responsibly to our security team.

Email: security@moontrackhr.com (see also our Trust Center)

Our Security Practices

Data Protection

  • All data is encrypted in transit and at rest
  • Regular automated backups with point-in-time recovery
  • Data centers in multiple geographic regions for redundancy
  • Strict data retention and deletion policies

Application Security

  • Secure development lifecycle (SDL) practices
  • Regular code reviews and security testing
  • Protection against OWASP Top 10 vulnerabilities
  • Content Security Policy (CSP) implementation
  • Rate limiting and DDoS protection

Authentication & Access

  • Multi-factor authentication (MFA) support
  • Secure password hashing with bcrypt
  • Session management and automatic timeout
  • IP-based access restrictions (enterprise)
  • Detailed audit logs for all access

Compliance & Certifications

  • SOC 2-aligned controls with readiness tracking
  • GDPR compliant
  • CCPA compliant
  • Regular third-party security audits

We use cookies to improve your experience. Essential cookies are always active. You can accept or reject non-essential cookies used for error monitoring and analytics. Learn more