...
Over public networks we send data using strong encryption. Collabushare utilizes SSL certificates issued by Heroku. Encryption-at-rest of databases is achieved using AWS’ transparent disk encryption, which includes industry standard AES-256 encryption to secure all volume (disk) data. All keys are fully managed by AWS. Backups are stored on Amazon S3 and encryption is performed via server-side encryption.
Files uploaded to Mav Collabushare are stored in private S3 buckets that require a one-time use, time-limited tokens for access.
...
All payments are handled by a third party payment processor, Stripe. Customer payment information is sent directly to Stripe and never stored on Collabushare servers. All payment requests bypass Collabushare servers completely ensuring sensitive payment information also does not appear in Collabushare logs.
...