Hosted on AWS
TapHero is hosted on Amazon Web Services across multiple datacenters. Our platform’s infrastructure supports the work your community relies on every day.
PLATFORM SECURITY
Your community’s data.
Our responsibility.
Security is part of how we host, build, and operate TapHero. From encrypted data to independent testing, we put protection at the foundation of your community’s everyday work.
Book a demoTrusted at over 100 associations
HOSTING & DATA PROTECTION
A secure foundation for
your community.
Encrypted in transit and at rest
All customer data is protected with TLS encryption in transit and AES-256 encryption at rest, covering data as it moves and while it is stored.
Access with a purpose
We practice least privilege across our engineering team and other staff. Access is limited to what people need to carry out their responsibilities.
Backed up across datacenters
Customer data is backed up and replicated across multiple datacenters, adding protection beyond the primary copy.
Point-in-time recovery
All databases use point-in-time recovery (PITR), allowing data to be restored to an earlier point within the available recovery window.
HOW WE BUILD & TEST
Security is an
ongoing practice.
Automated checks in our development process work alongside independent testing of the platform.
Automatic vulnerability scanning
Our software development lifecycle includes automatic vulnerability scanning to help identify potential security issues as we develop the platform.
Independent penetration testing
We perform multiple penetration tests each year through independent third parties, bringing an outside perspective to testing our security.
ACCESS & ACCOUNTABILITY
Control what users see.
Trace what happens.
Role-based security, built in
TapHero’s built-in role-based security system lets your organization granularly control what users can see and access across the platform. Assign permissions by role to reflect each person’s responsibilities.
Audit logs across the system
All actions are audit logged, from infrastructure activity through to end-user actions in the platform. Human and AI actions are both recorded, supporting traceability across the system.
AI GOVERNANCE
You set the limits.
The AI works within them.
The AI Control Center puts your team in charge of how AI participates in your community’s work.
Inside the AI Control CenterChoose the level of autonomy
Set Autopilot, Copilot, or Off by feature and request type. The AI acts only within the limits you set and follows the same permission boundaries as your employees.
Apply explicit guardrails
The AI can send a document only when a person has marked it shareable. It can accept a booking only when the booking satisfies the rules your team has set.
Keep AI actions accountable
Every AI action is logged and attributable: what it did, which record it acted on, and the reason it gave.
CUSTOMER DATA OWNERSHIP
Your data stays yours.
All customer data belongs to the customer.
We never sell customer data.
Export your data at any time, in full, without a support ticket.
Your community uses TapHero.
Your data belongs to your community.