Security Overview

Alpine Anchor is committed to providing highly secure and reliable automation and analytics solutions. We maintain the confidentiality of our clients’ information and ensure that their data is available when needed through the use of proven, tested, best-in-class security tools, technologies, practices, and procedures.

Compliance

PCI

For processing credit card payments, Alpine Anchor uses PCI Compliant Level 1 payment processors that maintain the highest standards of payment security.

Hosting Environment and Physical Security

Horizon’s production services run in containers on cloud servers operated by Hetzner Online GmbH. Our production database and file storage are provided by Supabase, and Cloudflare provides DNS and network ingress. Production customer data is hosted in the United States: our Hetzner servers are in Ashburn, Virginia, and our Supabase database and storage are in the US East region. Physical security of the data centers is provided by these hosting providers. See our Sub-Processors list.

Network Security

• All web traffic is encrypted and only accessible over HTTPS
• Strong encryption algorithms with minimum 128-bit key length
• Support for secure protocols including HTTPS, SFTP, and FTPS
• Multi-tier architecture segregating internal systems from public internet
• Public traffic reaches our production servers through Cloudflare, over outbound-only Cloudflare Tunnel connections, rather than directly from the internet
• Host firewalls restrict inbound access to our servers
• Centralized logging and metrics on our own infrastructure, with logs kept for 30 days

Authentication

• Enforced password complexity and expiration standards
• Optional Two-Factor Authentication (2FA) support
• Encrypted credential storage using 256-bit keys

Access Control and Monitoring

• Role-Based Access Control (RBAC)
• Separate development, test, and production environments
• Comprehensive user activity audit logs
• Central management console (Horizon Base Camp)

Application Development

Our software development lifecycle incorporates:

• Documented security and privacy considerations
• Design and code reviews
• Third-party dependency scanning
• Automated code and secret scanning
• Comprehensive unit and integration testing
• Regular security training for development staff

Vulnerability Management

• Regular internal vulnerability scanning
• Risk-based vulnerability remediation
• Continuous security monitoring

Data Privacy

• Comprehensive privacy policy
• Data Protection Addendum support
• Regular privacy impact assessments

Data Protection

• Connection credentials and OAuth tokens encrypted with AES-256-GCM before storage
• All data encrypted at rest using AES-256
• Configurable data retention periods
• Configurable retention policies

Backups and Recovery

We protect against data loss through:

• Containerized services that can be redeployed from versioned images
• Daily database backups, kept for 7 days
• A documented backup and recovery runbook

Incident Response

• 24/7 security monitoring
• Automated security and performance alerts
• Documented incident response runbooks

Our Organization

• Background checks for all employees
• Mandatory security awareness training
• Principle of least privilege access
• Regular access rights review

Vulnerability Disclosure

Alpine Anchor welcomes reports of potential security vulnerabilities. Reports can be submitted to [email protected]. We will acknowledge all reports and keep reporters informed of their status.

Note: Automated scanning of our systems is not permitted and may result in IP blocking.

For more information about our security practices or to request detailed security documentation, please contact your Alpine Anchor representative.