Security

Last updated: 18/04/2026

Personnel

All our contractors sign confidentiality agreements before gaining access to our codebase and data. We have a strict hiring process that has several steps including code challenge review, portfolio analysis and interviews.

Data Access

Our infrastructure is based on Google Cloud. We use Firebase (backend as a service). Access to dashboard and data is done by two-factor authentication and all security is handled by the Google Cloud Platform.

Code Practices

We ensure we have high quality code by using unit tests, integration tests. We also have a staging environment to run manual tests, once we ensure everything is fine we deploy it to production.

End to End Encryption

EventPixel provides data encryption in transfer via 256 bit Secure Socket Layer (SSL) technology and SHA-256 with RSA Encryption algorithm.

We use Google Cloud Platform to store all our data and it has default encryption at rest using either AES256 or AES128 technology. You can read more about Google Cloud encryption here: https://cloud.google.com/security/encryption-at-rest/.

Password Encryption

Our passwords are stored securely by using bcrypt technology provided by Google Cloud.

Payments

Payments are provided by Stripe, our third party provider. We don't store any billing information on our servers. Stripe is PCI-Compliant and adhere to the Payment Card Industry Data Security Standard.

Data center and backups

Data Center

EventPixel is hosted on Firebase that is part of Google Cloud Platform. Our data is hosted in US Central and EU Central (served according to client's location). Google Cloud is a very secure platform that has multiple certifications: ISO 27001, ISO 27017, ISO 27018, SOC 1/2/3, PCI DSS and CSA.

Physical Access Control

EventPixel is hosted on Google Cloud Platform. Google data centers feature a layered security model, including extensive safeguards such as: Custom-designed electronic access cards, alarms, vehicle access barriers, perimeter fencing, metal detectors and biometrics.

Backups

EventPixel does regular backups once per day. All backups are encrypted by default. Backups are deleted after 30 days of being created.