Security
How we protect the records daycares and families trust us with.
Where your data lives
Our servers and our backups are hosted on Microsoft Azure in the United States.
Encrypted, in transit and at rest
Every page and app connection uses https with modern encryption (TLS 1.2 or newer), and browsers are told to always use it. Stored data and backups are encrypted on disk.
Backups you can count on
Every night, every database is backed up, checked and copied off the server to Azure storage in the East US 2 region. Each copy is locked for its first 30 days, so it can’t be changed or deleted during that time. Nightly copies are kept for about 35 days and monthly copies for about 14 months, then deleted. We test restoring a backup every month.
Who can see what
Each daycare sees only its own records, and each state’s records are kept separate. Our databases can’t be reached from the internet, and each of our apps has its own limited database access.
Kept up to date
Most security updates install automatically each night. Database and Java updates are installed by hand after testing. A firewall guards our servers, and repeated failed sign-in attempts are blocked.
Passwords and keys
Most of the passwords and keys our services use are kept in Azure Key Vault. The rest are stored on the server where only administrators can read them.
Payments
Card payments are handled by Stripe or PayPal. We never see or store full card numbers.
Privacy for families
Family home daycares are shown by city and ZIP only, never a street address. Parent reviewers are shown by first name and last initial, and their email is never shown.
Report a security problem
Email support@americadaycare.com with “Security” in the subject. We read every report.