At Marvel we take the security and privacy of our user's data very seriously, and for very good reasons. We are constantly monitoring and improving Marvel to meet the growing demands and challenges of security.
Every person and team using our service expects their data to be secure and confidential, as such we have gone to extensive measures to protect it. As a rule we don't like to expose too much information about our security practices, ironically for security reasons. However we understand that security is very important to our customers, so we decided to share the following information. We hope you find it useful.
Communication
All user data is transported securely, as all traffic is encrypted in transit via SSL. Encrypting the data protects it from unauthorised modification and man-in-the-middle attacks. We use 256-bit SSL/TLS.1.2 encryption, utilising both the ECDSA and RSA algorithms.
Credit Cards
Marvel does not store any credit card information. We have partnered with Stripe for credit card processing. They power online transactions for thousands of business and SaaS platforms and comply with PCI standards in the storage and handling of credit card information.
Data Centre Security
Our hosting environment is Fully-Redundant with disaster recovery procedures. Our cloud hosting providers maintain multiple certifications for its data centers, including ISO 27001 compliance, PCI certification, and SOC. For more information about their certification and compliance, please visit the Google Cloud platform security and compliance website and the Amazon AWS security website.
Questions
if you have any security questions or if you believe you have found a security vulnerability please don’t hesitate to contact our security team.