Security Policy
We care about the data entrusted to us. We take security and privacy seriously and maintain safeguards designed to protect customer and business data processed through the Helprace Service.
Last revised on March 19, 2026, effective as of March 19, 2026
Definitions
For the purpose of this Policy, “Helprace”, “we”, “us”, or “our” refers to Helprace, Inc., the provider of the Helprace website and services accessible from the Helprace website (collectively, the “Helprace Service”).
Security Program
Helprace maintains administrative, technical and organizational measures designed to protect the confidentiality, integrity and availability of customer data. Our engineering and operations teams review security issues, software dependencies and infrastructure changes on an ongoing basis.
Infrastructure
Helprace’s application and data infrastructure is hosted with third-party infrastructure providers, including Amazon Web Services (AWS) and Hivelocity. Production access is restricted to authorized personnel with a business need for access. We use network, access-control and environment-level protections appropriate to the service.
For more information about AWS security, please refer to AWS security documentation.
Availability and Monitoring
We use monitoring, logging and alerting systems designed to detect anomalies that could affect availability, integrity or security. We design services with redundancy and recovery in mind, although uninterrupted availability cannot be guaranteed.
Application Security
Web traffic to the Helprace application is protected in transit using TLS on supported endpoints.
Customer data is logically segregated at the application and data tiers.
Access to production systems is limited based on role and operational need.
We use code review, testing and deployment processes intended to reduce security risk.
Where available in the service, Helprace may offer account-level security features such as IP restrictions and role-based access controls.
Email Security
Helprace supports transport encryption for supported inbound and outbound email channels where counterpart systems also support it. Because email depends on the capabilities of third-party mail systems, encrypted transport cannot be guaranteed in every case.
Engineering and Operational Practices
Changes to software and infrastructure are reviewed, tested and deployed through controlled processes.
We use automated build, test and deployment tooling for portions of our delivery lifecycle.
We maintain incident response processes for security and availability issues.
We review third-party libraries and infrastructure dependencies as part of ongoing maintenance.
Independent Reviews
Helprace may perform or commission vulnerability assessments, penetration testing, security reviews or similar evaluations from time to time. The timing, scope and results of such reviews are confidential unless we choose to disclose them.
Shared Responsibility
Security is a shared responsibility. Customers are responsible for configuring their accounts appropriately, safeguarding credentials, managing access permissions, and using the Helprace Service in a secure manner.
Policy Updates
We may update this Security Policy from time to time to reflect operational, legal or product changes. Material changes will be reflected by updating the date at the top of this page.
