Security

All connections are encrypted via HTTPS. Data in the database is stored encrypted at the hosting provider. Passwords are stored only as an irreversible hash.

Payment details are entered and processed directly at Stripe. We do not receive full card details.

Accounts activate two-factor authentication at registration. As a result, a second factor is needed in addition to the password to sign in.

The devices used are registered per account: one computer and one phone. An unknown device is not given access. This counters account sharing and takeover.

Login attempts, security events and error messages are recorded and monitored. Unusual patterns lead to an alert and, where necessary, to blocking.

Access to data is enforced at database level with access rules per user. Administrative functions are shielded and logged separately.

Daily back-ups of the database are made with a retention period of several days, so that data can be restored in the event of an incident.

If you have found a vulnerability, please report it via beleidsmonitor@hetstrategiebureau.com. We respond as quickly as possible and do not publish reporters' details without consultation.