{"id":35632,"date":"2022-05-23T08:28:37","date_gmt":"2022-05-23T08:28:37","guid":{"rendered":"http:\/\/34.89.9.203.nip.io\/wpadmin2\/?page_id=35632"},"modified":"2025-07-15T07:14:05","modified_gmt":"2025-07-15T07:14:05","slug":"security","status":"publish","type":"page","link":"https:\/\/zealous.co\/about\/security\/","title":{"rendered":"The many ways we keep your awards data secure"},"content":{"rendered":"\n

The many ways we keep your awards data secure<\/h1>\n\n

We take pride in keeping your data secure with the best security practices. Here are all the ways we keep you, and all your data, safe. <\/p><\/div><\/div>\n\n\n\n

\n
<\/div>\n\n\n\n
\n
\n

<\/i>\n\n\n\n

Server Security<\/strong><\/h2>\n\n\n\n

Zealous data is securely stored on Google Cloud <\/strong>in the UK,  with a twin data center in the EU (to be used as a fail-safe site should our primary center become unavailable).<\/p>\n\n\n\n

Our Google Cloud infrastructure offers the gold standard for data privacy and security. Certified ISO\/IEC 27001<\/a> \/ 27017<\/a> \/ 27018<\/a> \/ 27701 <\/a>and fully PCI DSS compliant.<\/p>\n\n\n\n

Our servers have SOC 1<\/a> \/ 2<\/a> \/ 3<\/a> reporting and are compliant with HIPAA<\/a>, GDPR<\/a>, and CCPA<\/a>, among others<\/a>.<\/p>\n<\/div>\n\n\n\n

\n

<\/i>\n\n\n\n

Safe Payments<\/strong><\/h2>\n\n\n\n

Zealous depends on Stripe to provide the industry\u2019s most secure payment processing.<\/p>\n\n\n\n

We do not directly store or process credit card data<\/strong>, instead payment information is sent directly from the person making the payment to the payment gateway for processing.<\/p>\n\n\n\n

Stripe is certified to PCI Service Provider Level 1<\/strong>, the most stringent level of certification available in the payments industry.<\/p>\n<\/div>\n<\/div>\n\n\n\n

\n
\n

<\/i>\n\n\n\n

Physical Security<\/strong><\/h2>\n\n\n\n

Our servers are physically monitored by a dedicated Security Operations team which detects and responds to internal and external threats, 24\/7\/365.<\/p>\n\n\n\n

Access to the data center floors is tightly controlled with multiple physical security layers<\/strong>. Including electronic access cards, alarms, vehicle access barriers, metal detectors and biometric identification.<\/p>\n\n\n\n

Laser beam intrusion detection and 24\/7 monitoring by high-resolution interior and exterior cameras. Click here for more info<\/a>.<\/p>\n<\/div>\n\n\n\n

\n

<\/i>\n\n\n\n

Server Access Controls<\/strong><\/h2>\n\n\n\n

Our highly scalable architecture is secured in a Virtual Private Cloud (VPC). Access to our servers is only possible by authorised staff via SSH key-based authentication through VPN access to our VPC. Only a limited number of senior employees are granted access to our servers through Identity and Access Management (IAM) and multi-factor authentication (MFA).<\/p>\n\n\n\n

Personnel access to network resources and secure areas is terminated on the day employees terminate their employment or no longer need access.<\/p>\n<\/div>\n<\/div>\n\n\n\n

\n
\n

<\/i>\n\n\n\n

Data Encryption<\/strong><\/h2>\n\n\n\n

All data stored across our databases and media storage is encrypted at rest<\/strong>, with all passwords stored encrypted by default.<\/p>\n\n\n\n

Zealous is TLS 1.2 encrypted<\/strong>, data in transit between your device and the front end, is protected with SHA-256 signed certificates and AES encryption<\/strong>. This ensures the highest level of security when viewing and entering data on our web page.<\/p>\n<\/div>\n\n\n\n

\n

<\/i>\n\n\n\n

Email Deliverability<\/strong><\/h2>\n\n\n\n

Mailgun ensures high deliverability and protection for transactional emails sent through Zealous.<\/p>\n\n\n\n

Mailgun is the leading email delivery service for businesses around the world with full GDPR compliance through SCCs, as well as robust data privacy and security through CPPA, SOC2, HIPAA, ISO 27001, PCI DSS and SOC 2 certification<\/a>.<\/p>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n

\n
\n

Reliability<\/strong><\/h2>\n\n\n\n

Stability and dependability at scale<\/p>\n<\/div>\n\n\n\n

\n
\n

<\/i>\n\n\n\n

Business Continuity<\/strong><\/h2>\n\n\n\n

To provide a continual service, our core data is backed up multiple times daily in separate locations to our core servers.<\/p>\n\n\n\n

Backups are only accessible over SSH key-based authentication by a select few members of Zealous responsible for disaster recovery.<\/p>\n<\/div>\n\n\n\n

\n

<\/i>\n\n\n\n

Scalability<\/strong><\/h2>\n\n\n\n

Zealous is built on Google Cloud\u2019s highly scalable cloud architecture. Allowing for servers to be created on the fly during peak load periods (such as award closing dates).<\/p>\n\n\n\n

This guarantees service stability and maintains balanced loading times even during heavy traffic (e.g. submissions closing).<\/p>\n<\/div>\n<\/div>\n\n\n\n

\n
\n

<\/i>\n\n\n\n

Transparent Uptime<\/strong><\/strong><\/h2>\n\n\n\n

Zealous successfully maintains an uptime of 99.98%.<\/p>\n\n\n\n

You can view real-time live status updates of our services, as well as third-party components, on our public status page<\/a>.<\/p>\n<\/div>\n\n\n\n

\n

<\/i>\n\n\n\n

Reviews<\/strong><\/h2>\n\n\n\n

Our server and data infrastructure is regularly reviewed and updated to match modern technology solutions. Giving us the flexibility to provide you with more features and cutting-edge security standards.<\/p>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n

\n
\n

Privacy<\/strong><\/h2>\n\n\n\n

Maintaining our users right to privacy at all times.<\/p>\n<\/div>\n\n\n\n

\n
\n

<\/i>\n\n\n\n

Data Handling<\/strong><\/h2>\n\n\n\n

We know all data we hold about you, and those submitting to your opportunities is valuable.<\/p>\n\n\n\n

Our employees are trained to follow best practices when handling reports and enquires away from the network \u2013 keeping any reports we have run for you safe.<\/p>\n<\/div>\n\n\n\n

\n

<\/i>\n\n\n\n

Privacy Policy & DPA<\/strong><\/h2>\n\n\n\n

Global privacy laws are constantly being changed. Being straightforward about what data we hold allows us to navigate changes in new legislation around the world quickly.<\/p>\n\n\n\n

We have embraced transparency in our privacy policy<\/a> to let all users of our services know exactly what data is being collected for which purposes and cover all the requirements contained in the EU Data Processing Agreement.<\/p>\n<\/div>\n<\/div>\n\n\n\n

\n
\n

<\/i>\n\n\n\n

GDPR<\/strong><\/strong><\/h2>\n\n\n\n

Zealous is fully compliant with the EU\u2019s GDPR regulations. As a host, you may download reports to satisfy information requests and add further consent options for anyone submitting to your opportunity.<\/p>\n\n\n\n

Candidates can revoke your access to their entry, as well as permanently delete themselves from Zealous at any time. This will automatically revoke and remove their data protected under GDRP from your opportunity.<\/p>\n<\/div>\n\n\n\n

\n

<\/i>\n\n\n\n

Standard Contractual Clauses<\/strong><\/h2>\n\n\n\n

With Privacy Shield being invalidated by the EU Court of Justice, Zealous has signed agreements containing the EU Standard Contractual Clauses with all third-party suppliers processing data in the US.<\/p>\n\n\n\n

This allows for data on EU citizens to continue to move freely between the US and the UK whilst protecting EU citizens\u2019 rights to their data.<\/p>\n<\/div>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

We take pride in keeping your data secure with the best security practices. Here are all the ways we keep you, and all your data, safe.<\/p>\n","protected":false},"author":3,"featured_media":39905,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"wp-custom-template-host-pages","meta":{"footnotes":""},"class_list":["post-35632","page","type-page","status-publish","has-post-thumbnail","hentry"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/zealous.co\/about\/wp-json\/wp\/v2\/pages\/35632","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/zealous.co\/about\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/zealous.co\/about\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/zealous.co\/about\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/zealous.co\/about\/wp-json\/wp\/v2\/comments?post=35632"}],"version-history":[{"count":0,"href":"https:\/\/zealous.co\/about\/wp-json\/wp\/v2\/pages\/35632\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/zealous.co\/about\/wp-json\/wp\/v2\/media\/39905"}],"wp:attachment":[{"href":"https:\/\/zealous.co\/about\/wp-json\/wp\/v2\/media?parent=35632"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}