Security at Bezi
From the outset Bezi has taken security seriously. Our customers are creating the next generation of visual content and communication, and it’s crucial to us that your work is safe. We have integrated security measure into our product and how our team operates on a daily basis.
Our security program is based on industry standards, and we use the best tools to track and enforce our compliance.
01
Information Security Program
Compliance
Bezi is pending SOC 2 Type I certification. All customers have access to our certification. To receive a copy of the report, please email security@bezi.com. If you are Enterprise customer, please reach out to your dedicated Bezi contact.
Bezi will be SOC 2 Type II certified by the end of 2024.
Our payment processor, Stripe is a certified Level 1 Service Provider. Bezi never has access to sensitive payment details.
02
Internal Security Measures
Personnel security
Bezi completes background checks on all employees.
Identity and access management
Employees have unique logins and passwords for all business-related systems, which live in top-tier password vaults (i.e. 1password). We enforce two-factor authentication wherever possible.
Hardware security
All employee laptops are managed, have encrypted hard drives and are monitored with antivirus software.
Security education
As part of our security commitment, we require every employee to participate in ongoing security training throughout the year. Every new employee has Security training as a part of their onboarding to ensure Bezi remains closed to potential threats.
03
Bezi Application Security
Security features
By hosting Bezi platforms on AWS, we have access to the benefits provided to their customers such as physical security, redundancy, scalability and key management.
In addition to the benefits provided by AWS, our application has invested in building additional security features. Capabilities vary based on subscription tier.
Single Sign-On
Role based permissions
SSO capabilities with G Suite
Two-factor authentication (coming soon!)
Customer data and privacy
Bezi stores the following customer identifiable data in our cloud:
Customer data
Names (as provided by the user)
Usernames
Email addresses
Company (for Enterprise customers only)
Payments data (stored and processed by Stripe)
Billing email addresses
Payment history and invoices
Billing addresses
Aggregated non-identifiable analytics data
Location (city, country, pulled from IP addresses when using Bezi)
Encryption
All application and customer data is encrypted in flight and at rest.
3rd party sub-processors
Bezi uses 3rd party service providers to help with analytics, payments, sending transactional emails and for hosting our service.
We conduct intense due diligence reviews as part of our service provider evaluation to ensure your data stays secure. We optimize for providing minimum data possible to do the required task.
Infrastructure availability
Our backend infrastructure is hosted in AWS and is fully monitored to detect any downtime.
SLAs for Bezi’s Application are available through the Bezi Master Service Agreement, offered under the Enterprise Plan.
Responsible disclosure
If you believe you have discovered a vulnerability within Bezi’s application, please submit a report to us by emailing security@bezi.com.
If you believe your account has been compromised or you are seeing suspicious activity on your account please report it to security@bezi.com. If you are Enterprise customer, please reach out to your dedicated Bezi contact as soon as possible.
04
Best Practices
Best practices
Never share credentials for your account.
Use Multi-Factor Authentication or Single Sign-On to access your Bezi account
Make sure you check the status of Bezi File links before sharing them out, to ensure it is only visible to the desired people.
05
Contact
Contact us
If you have any additional questions regarding Bezi’s security program, please reach out to security@bezi.com. For Enterprise customers, please reach out to your dedicated Bezi contact to get more information.
You can view FAQs about Privary & Security here.
