security.html

<!doctype html>
<html class="no-js" lang="">
  <head>
    <meta charset="utf-8">
    <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1">
    <title>Tilt Security Practices</title>
    <meta name="description" content="">
    <meta name="viewport" content="width=device-width, initial-scale=1">
    <link rel="stylesheet" href="style.css">
    <link rel="stylesheet" href="header-style.css">
    <script src="src/jquery-2.1.4.min.js"></script>
    <script>
        $(function() {
            $("#header").load("header.html");
        });
    </script>
  </head>
  <div id="header"></div>
  <body>

    <h1>Security Practices</h1>

    <p>Wondering how safe Tilt is to use?</p>

    <p>Leading companies like ESPN and Microsoft have trusted us to power commerce for their business. We've also helped local governments and major research universities realize their visions for the future. And every day, groups of all sizes are making amazing things happen on Tilt.</p>

    <p>Here are some of the security measures we've put in place to protect your information on Tilt.</p>

    <h2>Our encryption game is strong.</h2>

    <p>All of our sites use SSL encryption with <a href="https://en.wikipedia.org/wiki/Forward_secrecy">Forward Secrecy</a> enabled for clients and browsers that support it to protect your information in transit. We regularly monitor our SSL implementation for security vulnerabilities and patches. We constantly think of ways to improve our SSL stack by evaluating our certificates, certificate authorities, and supported cipher suites.</p>
    
    <p>All sensitive customer data is encrypted and secured on servers that cannot be directly accessed from the internet.</p>

    <h2>We love PCI in a nerdy way.</h2>

    <p>The <a href="https://www.pcisecuritystandards.org/index.php">PCI Security Standards Council</a> develops and enforces strict payment card data security standards. Tilt maintains PCI compliance to protect your cardholder data.</p>

    <h2>On mobile? We’ve got you covered.</h2>

    <p>Our mobile applications use certificate pinning to secure customer data against <a href="https://en.wikipedia.org/wiki/Man-in-the-middle_attack">man-in-the-middle</a> attacks.</p>

    <h2>Our security team is at the ready.</h2>

    <p>If you encounter any issues while using Tilt, please contact us at security@tilt.com. We investigate and respond to all reported security issues as quickly as possible. For the protection of our users, we ask that you not publicly disclose any suspected security issue until we have addressed it.</p>
  </body>
</html>