Last Updated: March 9, 2023

SECURITY POLICY

At Always Education security is of utmost importance. Our systems have been developed to handle sensitive data securely while maintaining high standards for performance. In order to provide these highly secure systems that are able to perform well under stress, we use up to date best practices in the Information Technology, and Cyber Security fields. Systems and services within Always Education adhere to guidelines regarding system access, proper deployment of software, and sensitive data storage.

How we maintain highly secure systems with performance in mind:

All traffic to and from our web servers use the latest HTTPs services available.
Unique identification allows only permitted individuals access to our services.
Internal server access is limited only to those who require it.
Access logs are maintained for every server.
Firewalls are used to isolate our systems from external and internal threats.

Data Security

Through the use of the Google Cloud Platform, all of our hosted systems are encrypted using military grade encryption methods, both at rest and in transit. Our active system storage (as well as backup and snapshot storage) space is encrypted using the same military grade encryption. At any point in time user-data hosted within Always Education systems is encrypted.

In order to maintain a higher level of security our systems:

Perform backups frequently ensuring complete replicas of the systems.
Use database clustering and replication to ensure high availability, scalability, and most of all replicas of data in case of failure.
Highly scalable systems to handle high system usage without interruption.

Systems at Always Education use the latest methods in encryption and replication, we also maintain firewalls within our product. These firewalls ensure that only those who need access to these systems are allowed to. Each server communicates with only the needed servers/services within the network, ensuring data is handled properly and securely.

Data Integrity

Our systems are backed up on a regular basis automatically. Snapshots along with full system backups are implemented. Unlike other services that only offer data backups daily or weekly, our systems, if needed, are able to replicate in real time. That means instead of losing data by going back to the last snapshot of the systems, our systems will have all required data up to the point of failure. This allows Always Education to bring systems and services back with minimal interruption.

Physical Security

Google Cloud Platform (GCP) is used to host our systems/services. GCP is the trendsetter of the cloud hosting market. GCP is constantly developing new security practices and products. Their services maintain the highest standard for all of their physical security as well as internal products and adhere to: ISO 27001, ISO 27017, SOC 1/2/3, PCI DSS, etc... To see more about how Google handles security visit Google Cloud Platform

Data Breaches

Always Education systems are protected through the use of GCP and their suite of products/services. We also maintain our own monitoring methods to ensure data breaches are caught as they happen. User interaction with the systems are monitored, and logs of the systems themselves are watched closely. Alerts on user incidents, as well as server errors are automatically sent to us. These methods ensure we can respond as quickly as it happens. If a data breach should occur, we will work directly with our clients and end-users to notify them of the occurrence