Security

At Membroz, security is an important part of how we design, develop, operate, and improve our platform. We understand that our customers trust us with important business and member information, and we take reasonable technical and organizational measures to help protect that information.

1. Data Protection

Membroz is designed with security and data protection considerations throughout the application and infrastructure lifecycle.

Depending on the services and configuration used by a customer, information processed through Membroz may include:

• Business and organization information
• Member profile and contact information
• Membership and subscription information
• Booking and facility usage information
• Billing and transaction-related information
• Communication and engagement data
• User account and access information

We apply appropriate safeguards based on the nature of the information and how it is used.

2. Infrastructure Security

Membroz uses cloud-based infrastructure and modern application technologies to operate its services.

Security measures may include:

• Secure cloud infrastructure and hosting environments
• Network and application-level access controls
• Encryption of data during transmission using HTTPS/TLS
• Controlled access to production systems
• Authentication and authorization mechanisms
• Monitoring and logging of relevant system activities
• Regular software and dependency updates
• Backup and recovery procedures

Specific security controls may vary depending on the Membroz product, deployment, integration, and customer configuration.

3. Access Control

Access to Membroz systems and customer information is restricted based on business requirements and authorization.

We follow the principle of limiting access to information and systems to authorized personnel who require access to perform their responsibilities.

Customer administrators are responsible for maintaining the confidentiality of their account credentials and appropriately managing user permissions within their organization.

4. Application Security

Security is considered throughout the development and maintenance of the Membroz platform.

Our practices may include:

• Secure authentication and authorization
• Input validation and protection against common application vulnerabilities
• Role-based access controls
• Secure API communication
• Protection of sensitive configuration and credentials
• Dependency and software maintenance
• Logging and monitoring of application activity

5. Payment Security

Membroz may integrate with third-party payment providers to enable online payments.

Where payment processing is handled by a third-party payment provider, payment card and other sensitive payment information may be processed directly by that provider in accordance with its own security and privacy practices.

Membroz does not intend to store complete payment card details unless specifically required and supported by the applicable payment integration.

6. Third-Party Integrations

Membroz can integrate with third-party services such as payment gateways, property management systems, point-of-sale systems, communication platforms, access-control systems, analytics services, and other business applications.

Security and privacy practices of third-party services are governed by their respective policies and agreements. Customers should review the security and privacy practices of third-party services they choose to connect with Membroz.

7. Data Backup and Recovery

We maintain operational processes designed to support the availability and recovery of Membroz services and customer information.

Backup, retention, and recovery practices may vary depending on the service, infrastructure, and customer configuration.

8. Security Incident Response

We maintain processes for identifying, investigating, and responding to suspected security incidents.

Where a confirmed incident affects customer information and notification is required under applicable law or contractual obligations, we will provide appropriate notification and relevant information as required.

9. Customer Responsibilities

Security is a shared responsibility. Customers are responsible for:

• Protecting their account credentials
• Using strong and unique passwords
• Enabling available security features where appropriate
• Managing user roles and permissions
• Restricting administrative access
• Keeping connected third-party systems secure
• Promptly notifying Membroz of suspected unauthorized access or security incidents

10. Responsible Disclosure

If you believe you have identified a security vulnerability affecting Membroz, we encourage you to report it responsibly rather than publicly disclose the vulnerability.

Please contact us with relevant details so our team can investigate and respond appropriately.

Security Contact: security@membroz.com

Please do not include passwords, payment card information, or other unnecessary sensitive information in your initial security report.

11. Continuous Improvement

Security is an ongoing process. We regularly review our systems, processes, infrastructure, and application architecture to identify opportunities to improve the security and resilience of the Membroz platform.

For questions regarding Membroz security practices, please contact us at security@membroz.com.