Security

We know your security is extremely important to you and your business, and we’re very protective of it.

Overview

WeatherPoint is a weather monitoring/forecasting/alerting tool used by individuals and teams around Australia (and hopefully the world). We do our best to provide a high level of security in every piece of work and service we do. Should you have any questions, want to report a vulnerability or encounter an issue, please email us on hello@weatherpoint.com.au.

Infrastructure

All of our services run in the cloud. WeatherPoint does not run its own routers, load balancers, DNS servers, or physical servers.

Software Security

We employ a team of excellent engineers at WeatherPoint to keep our software and its dependencies up to date eliminating potential security vulnerabilities. We employ a wide range of monitoring solutions for preventing and eliminating attacks to the site.

Backups and Data Storage

Every piece of information we use has an identical copy ready and waiting for an immediate hot-swap in case of hardware or software failure. Every bit of information is saved in at least of three different locations. We do not immediately remove user data from backups when deleted by the user, as we may need to restore it for the user if it was removed unintentionally.

Development and QA environments are physically separated from WeatherPoint’s production environment. No customer data is ever used in development or QA environments.

Data in Transit, Communications

All sensitive data (including logins) exchanged with WeatherPoint is always transmitted over SSL. Where possible, internal resources communicate with each other over SSL too.

Maintaining security

We protect authentication mechanisms from brute force attacks with rate limiting. All sensitive information including passwords are obfuscated from all our logs and are one-way hashed in the storage using bcrypt. WeatherPoint performs regular penetration test audits with a contracted third party.

Credit card safety

When you sign up for an account on WeatherPoint, we do not store any of your credit card information on our servers. It’s handed off to Braintree Payment Solutions or Stripe, both companies are dedicated to storing your sensitive data on PCI-Compliant servers.

Contact Us

Have a question, concern, or comment about WeatherPoint security? Please contact hello@weatherpoint.com.au.