Security

Security is foundational to Tripivon. Your agency trusts us with sensitive enquiry, booking, and financial data, and we protect it with layered technical and organizational controls. This page summarizes the measures we have in place.

We encrypt data at every stage of its lifecycle.

• All data in transit is protected with TLS 1.2 or higher.
• Data at rest is encrypted using AES-256.
• Encryption keys are managed by a dedicated key-management service with regular rotation.

We follow the principle of least privilege across our systems and our own team.

• Role-based access controls limit what each user in your workspace can see and do.
• Employee access to production systems requires multi-factor authentication and is logged.
• Access is reviewed regularly and revoked promptly when no longer needed.

Tripivon runs on leading cloud infrastructure with high-availability regions, network isolation, and continuous monitoring. We maintain automated backups and tested recovery procedures to keep your data safe and available.

We build security into our development process with code review, dependency scanning, and automated testing. We conduct regular vulnerability assessments and engage third parties for periodic penetration testing.

Our platform is designed to support your regulatory obligations, including GDPR and financial record-keeping requirements. We provide audit-ready exports and data-processing agreements on request.

We continuously monitor our systems for suspicious activity and maintain an incident-response plan. In the event of a security incident affecting your data, we will notify affected customers promptly and in line with our legal obligations.

We welcome reports from security researchers. If you believe you have found a vulnerability, please email security@tripivon.com with details so we can investigate and respond quickly. We ask that you avoid accessing customer data and give us reasonable time to remediate before public disclosure.