Security and privacy for municipal work
Conflation Labs is committed to protecting the systems, documents, plans, project data, and other information entrusted to us. Our information security program is designed to reduce risk, safeguard data, and support reliable technology for municipal planning, zoning, permitting, design-review, and related workflows.
This summary describes our information security program in plain language and at a high level.
1. Data Protection
Sensitive data is encrypted in transit and at rest. We maintain documented data flows so we understand where information is stored and how it moves through our systems.
2. Access & Authentication
Access follows least-privilege, role-based principles:
- Team members are given unique accounts, with access scoped to the role they perform.
- Access is removed when it is no longer needed.
- Multi-factor authentication is required on critical systems.
- Access to production is tightly limited.
3. Secure Systems & Devices
Company devices are hardened and protected with full-disk encryption, malware protection, and session timeouts. Firewalls are in place, access to our infrastructure is controlled, and changes are reviewed for security before they are released.
4. Monitoring & Vulnerability Management
We log key security events in production and monitor for threats and anomalies. Our vulnerability management practices include:
- Regular vulnerability scanning, and additional scanning after major changes.
- Static analysis of our code and dependencies.
- Penetration testing performed by a third party.
5. Backups & Incident Response
Backups run automatically and are tested annually as part of our recovery planning. We monitor production continuously and maintain incident response procedures so that issues are identified and handled through a defined process.
6. Vendor Security
We review the security of our vendors before they process or access production data.
7. Accessibility
Conflation Labs is working to make our website and digital experiences usable by as many people as possible. We aim to incorporate accessible design and development practices, including keyboard-friendly navigation, meaningful page structure, readable content, and appropriate text alternatives for informative images.
We continue to improve accessibility as our products and website evolve. If you encounter an accessibility barrier or need assistance accessing information, please contact us at al@conflationlabs.com.
8. Contact & Customer Diligence
Customers and prospective customers conducting a security review can request further information about our information security program. The same address can be used to report a suspected security issue. Contact al@conflationlabs.com.