Security Policy

Security of the SOAR website services are of utmost importance to us. We do the following to ensure the security of your unit website and its data.

  • All SOAR servers are dedicated servers. No other companies share space on our servers.
  • All dedicated servers have firewalls to prevent administrative access from outside our offices.
  • The operating system and all software components are kept up-to-date on any patches/upgrades.
  • The SOAR service is based on an open source Content Management System (CMS) that is used widely across the internet and has been thoroughly tested.
  • Each customer has their own separate and independent database and file space. No way for customers to gain access to each other's data.
  • We block the addition of certain HTML tags (embed, script, iframe) in your content to protect sites from injection of malicious code.
  • We force members to pick secure passwords that are 6 characters in length and contain at least one character and one number.
  • HTTPS/SSL is available on all SOAR websites. We keep SSL certificates active for the domain name SOAR provides you. Upon request we can install an SSL certificate you purchase for a domain name you own on your SOAR website. Upon request we can make HTTPS/SSL the default protocol for your SOAR website.
      We do not do this by default because more than half our customers use their own domain name and do not want to pay the yearly fees for their own SSL certificate.
  • Our backups are only store on dedicated servers owned by SOAR.
  • SOAR Employees will only access your site/data in response to a support request by the customer.
  • As a paying customer, the data on your website if fully owned by you.