Security at PushPulse
We build safety software for teams that protect people. We hold our own platform to that same standard, with security and privacy built into how PushPulse is designed, hosted, and operated.
Last reviewed: May 2026
Encrypted at rest and in transit
Built on AWS
Logically isolated tenants
Role-based access control
Security built into the platform
The controls below are in place today across the PushPulse platform.
Data Encryption
- Encrypted at rest using AES-256.
- Encrypted in transit over TLS for all connections between your devices and our services.
- No data sold to third parties, ever. Your data is yours.
Access & Permissions
- Role-based access control restricts who can see and do what within your organization.
- Least-privilege principle applied to internal access to production systems.
- Granular permissions let admins control sensitive actions and data per user.
Data Protection & Isolation
- Logical isolation separates each customer's environment from every other.
- Automated backups protect against data loss and support recovery.
- Centrally managed controls keep your data secure and consistent.
Infrastructure & Availability
- Hosted on AWS across geographically separated data centers.
- DDoS protection and mitigation at the infrastructure layer.
- Resilient by design so alerts get through when they matter most.
Built on enterprise-grade cloud infrastructure
PushPulse runs on Amazon Web Services. Our underlying infrastructure inherits the physical and environmental security of AWS data centers, which maintain leading industry certifications and attestations including SOC 1, SOC 2, SOC 3, ISO 27001, and PCI DSS. This gives our platform a hardened foundation maintained by one of the most rigorously audited infrastructure providers in the world.
Security as an ongoing practice
Secure development
Security is considered throughout how we design, build, and ship changes to the platform.
Monitoring & backups
We monitor our systems and maintain automated backups to support availability and recovery.
Least-privilege access
Internal access to production data is limited to what is needed, and managed centrally.
Report a security concern
If you believe you have found a security vulnerability or have a question about our practices, we want to hear from you.
security@pushpulse.comSee PushPulse in action
Get a personalized walkthrough, and bring your security questions. We are happy to answer them.