Sign up = 10 credits to see your brand's visibility in ChatGPT and Gemini
Information Security
GROWTH SPA
GROWTH SPA runs an information security program based on the NIST Cybersecurity Framework. Our policies and procedures are documented, approved by management and communicated regularly to the team.
Security policies and standards
Formal program based on the NIST Cybersecurity Framework
Policies approved by management
Quarterly and annual updates
Monthly security training
Infrastructure and protection
Cloud infrastructure
Supabase and Google Cloud
Firewalls
"Deny all" configuration by default
Encryption in transit
TLS 1.3 for data in transit
Encryption at rest
AES-256 for data at rest
Backups: Redundant and encrypted, managed by our infrastructure providers
Authentication and access control
Multi-factor authentication (MFA): Required for the internal team
Password policies: Strong passwords rotated every 90 days
Least privilege: Access limited by role
Segregation of duties: Clear separation of responsibilities
Inactive users: Automatically deactivated
Incident management and continuity
Incident response
• Documented procedures
• Team with defined roles
• Defined response times
Business continuity
• Plan backed by our providers' redundancy
• Geographic redundancy
• Quarterly drills
Compliance
SearchBrand does not hold its own SOC 2 or ISO 27001 certification. Our infrastructure runs on SOC 2 and ISO 27001 certified providers (Supabase and Google Cloud).
GDPR
Data processing in line with the General Data Protection Regulation
Law 19.628 (Chile)
Protection of privacy and personal data
Encryption in transit and at rest
TLS 1.3 and AES-256
Certified providers
Supabase and Google Cloud: SOC 2 and ISO 27001 (provider certifications)
Monthly internal audits
Quarterly compliance reviews
Personal data protection
Information classification: Three security levels
Role-based access control (RBAC): Granular permissions
Audit logs: Detailed activity records
Document retention: Established procedures
Breach notification: Within legal deadlines
Secure development
In-house code: Developed internally
Security review: Required for all code
Segregated environments: Development, staging and production
Version control: Git with full history
Vulnerability scanning: Monthly and automated
Monitoring and auditing
Continuous: Access logs
Monthly: Vulnerability scanning
Monthly: Internal audits
Weekly: Firewall reviews
Quarterly: Management reports
Quarterly: Compliance reviews
Security contact
Email: hi@searchbrand.ai
DPO: Orlando Flores
Incident reports: hi@searchbrand.ai
This page summarizes GROWTH SPA's commitment to information security and personal data protection. For details on how we process personal data, see our Privacy Policy.