Data Security

Secure by Design

At STEM [PI], we embed security into every stage of our software development lifecycle. Our secure by design approach ensures that security considerations are integrated from the initial design phase through to deployment and maintenance. This proactive strategy minimizes vulnerabilities and ensures our products are resilient against threats, providing robust protection for our users' data.

How we protect your Information

The security of your Information is important to us. We maintain industry standard physical, technical and administrative safeguards designed to protect your Information from unauthorized access. We update and assess our security controls on a regular basis including through audits conducted by third party auditors. Electronic Information, about visitors to our company web app (Stash Hunt™) and Information submitted to our Platform, regarding their account and log-in information, any feed created, whatever the search happens, is stored on a non-internet environment database servers hosted on our cloud server in India.

Encryption

Encryption is a cornerstone of our data security strategy. We use state-of-the-art encryption technologies to protect data both at rest and in transit. By encrypting sensitive information, we ensure that even if data is intercepted, it remains unreadable and secure. Our encryption practices comply with industry standards and regulatory requirements, safeguarding the confidentiality and integrity of your data. We uses the latest technology in the market to double shield the data what we collect from you via Stash Hunt™. We have implemented Transparent Data Encryption (TDE) to encrypt data at rest. We encrypt data before write to disk, and decrypt it when display. Every customer/tenant will be configured with their own private key that helps to encrypt data before it write to disk and decrypt data once read it from disk. Only and only Customer can have access to their data not even STEM[PI]. Underlying technology behind encryption is Advanced Encryption Standard (AES) 256 which is a symmetric encryption algorithm that uses a 256-bit key to convert plain text or data into cipher. We make sure all connections to our servers use Transport Layer Security (TLS).

Data Isolation

We prioritize data isolation to ensure that each customer's data is segregated and protected. By using advanced multi-tenancy architecture, we prevent cross-contamination of data between different users. This ensures that your data remains confidential and inaccessible to unauthorized parties, providing an additional layer of security and privacy.

Data Retention

We retain customer data until a deal is finalized between STEM [PI] and the customer. During this period, we securely store the data to facilitate the negotiation and agreement process. Our data retention policies are designed to store data only for as long as necessary to fulfill its intended purpose, which includes finalizing business agreements and contracts.

Data Handover

In the event that a customer decides not to proceed further with STEM [PI] for any reason, we ensure a seamless transition by providing the customer with the entire data set created during our engagement. This data is provided in JSON format, enabling easy access and transfer to the customer's systems or preferred storage.

Data Disposal

Once a deal is finalized or if a customer decides not to proceed further, we employ secure disposal methods to remove the data from our systems. This includes cryptographic erasure to ensure that the data is permanently and securely deleted from our databases. Additionally, we may utilize physical destruction methods for any associated physical storage devices, ensuring that no trace of the data remains within our infrastructure.