{"id":4822,"date":"2023-04-05T18:23:43","date_gmt":"2023-04-05T18:23:43","guid":{"rendered":"https:\/\/gokid.mobi\/?page_id=4822"},"modified":"2024-05-10T18:24:34","modified_gmt":"2024-05-10T18:24:34","slug":"security-at-gokid","status":"publish","type":"page","link":"https:\/\/gokid.mobi\/security-at-gokid\/","title":{"rendered":"Security Practices at GoKid"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t\t
<\/div>\n\t\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Our Security Practices<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Security Practices at Gokid
<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

UPDATED: May 10, 2024<\/strong><\/p>

At GoKid we want our users to know that we are handling their sensitive data respectfully, carefully, and with best security practices in mind. Our Data Use and Privacy Policy<\/a> details how we use the information given to us while this page explains how we take care to follow secure practices in building and maintaining our technology to protect our users’ information. You can find below our security practices in Development<\/strong> (related to how we build our apps), Infrastructure ( related to how we manage the ongoing use of our apps) and Risk Management<\/strong> (related to how we prepare to respond to potential incidents).
.<\/p>

Development<\/h3>

When looking into new features we have security as one of the priorities. So we design with standard security practices in mind.<\/p>

Data encryption and security practices\u00a0<\/b>
At GoKid, we prioritize the security of your data by employing standard encryption techniques to protect the information transmitted between your devices and our servers.<\/p>

Vigilance in Third-Party Library Usage<\/strong>
Prior to any release, diligently seek out and apply common fixes and updates to ensure the integrity and security of third-party libraries<\/p>

Adherence to Authorized APIs Only<\/strong><\/p>

We limit the APIs available to developers to mitigate the risk of data breaches and ensure the security of our systems.<\/p>

High-Level User Authentication<\/b>
We implement the most common and secure protocol for Authentication OAuth2 with JSON web tokens.<\/p>

Tamper Detection Techniques<\/b>
Tamper detection techniques are deployed to get alerts whenever someone tries to tamper with our code or inject malicious code into our application’s source code.<\/p>

Leverage The Principle of Least Privilege (POLP)<\/b>
The principle of least privilege that dictates a code should run with only those permissions that are essential for its functioning and nothing more than that.<\/p>

Test & Update Regularly<\/b>
Testing and updating our applications is an ongoing process that we rigorously adhere to before every release, ensuring the highest standards of quality and security.
We test the Gokid apps, and our Gokid Connect school solution prior to every release by our\u00a0 QA team.<\/p>

Infrastructure
Robust Change Management and Deployment Automation<\/strong><\/p>

Our infrastructure is governed by a comprehensive change management process that encompasses source code control, peer code review, logging, and alerts for unusual behavior. All production changes are facilitated through an automated system capable of detecting reliability issues and reverting problematic deployments. This automation empowers us to deploy code safely and reliably to production multiple times per week.<\/p>

Availability and Disaster Recovery<\/strong>
Since our service is based entirely in the cloud, our disaster recovery plan is based on best practices from Google Cloud Platform for maintaining resiliency in the case of disaster. This cloud-based approach allows us to leverage the robust, scalable infrastructure of Google Cloud Platform to implement a resilient disaster recovery strategy that ensures minimal downtime and maintains data integrity in any situation.<\/p>

Data Isolation<\/b>
The code controls are tested before every production deploy. Data processing occurs in containerized environments with limited access to external resources. Services use ephemeral credentials for services to access data stores<\/p>

Network Isolation<\/b>
GoKid limits external access to network services by running them inside of a Virtual Private Cloud (VPC) and blocking all unnecessary ports from external traffic. Access to our production network is limited to necessary personnel, logged, and secured using multiple factor authentication.<\/p>

Risk Management<\/h3>

As part of our comprehensive data protection program, GoKid maintains cyber insurance through a leading insurer that provides us with financial and operational resources to respond effectively to potential cyber incidents. Key coverages and services include:<\/p>