Security

Our approach

FollowerSeek holds a small amount of data: workspace members, saved lists and audit history. We keep the surface small and protect what we hold with practical controls.

Data in transit and at rest

All traffic to the site is encrypted in transit. Access to stored data is limited to the systems and people who need it to run the service, and credentials are kept out of source code.

Access control for your team

Growth includes audit history so you can see who ran which check. Agency adds roles for admin, editor and viewer, and SAML single sign on so your team signs in with your identity provider. Setup guides for SSO are provided step by step.

Backups and recovery

Data is backed up on a regular schedule and restore procedures are tested, so that an incident does not cost you your saved lists.

Security review pack

Agency subscribers can request a security review pack describing our controls for their procurement team. Write to [email protected].

Reporting a vulnerability

If you find a weakness, send the details to [email protected]. Please give us reasonable time to fix it before sharing it publicly, and do not access data that is not yours.