Data Security Policy

Your use of the Player XP (together with its affiliates, “Player XP Report”, “Hertzian API” or “us”/“we”/“our”) websites (the “Sites”), mobile applications and any services offered by Hertzian’s network of properties (collectively with the foregoing, the “Services”) is subject to you agreeing to our Terms and Conditions. If you do not agree to these terms, then you may not use the Services.

1. Our Commitment to Data Security

We are in the business of data analytics, so the privacy and security of that data is just as important to us as the products we create using it. We continually invest in maintaining industry-leading security standards while making sure we protect the confidentiality of our users and their data. We take a comprehensive, proactive approach to data security, which is outlined below.

2. Cyber Essentials Plus & Security Standards

Hertzian is committed to maintaining robust cyber hygiene and protecting our infrastructure against cyber threats. Our security framework incorporates the rigorous standards required by Cyber Essentials Plus. Our services are reviewed, monitored, and tested regularly by our team and independent security professionals to ensure compliance with these high standards.

3. Data Encryption and Protection

3.1 Data in Transit

Sensitive information you exchange with Player XP is always encrypted in transit. Anytime you enter a password on the Player XP website or view your data, that information is transmitted using the industry-standard SSL/TLS (Secure Sockets Layer/Transport Layer Security) encryption protocol. You can verify this by looking for the “lock icon” in your browser's address bar. This ensures the secure transmission of private information, such as usernames, passwords, and banking details, over the Internet.

3.2 Data at Rest

Your information is stored securely. Your username, password, and any credentials belonging to 3rd party services you have linked with Player XP are always hashed and stored in an encrypted format.

4. Hosted on AWS Secure Servers

We leverage Amazon Web Services (AWS) to host our data securely. The IT infrastructure that AWS provides is designed and managed in alignment with best security practices and a variety of rigorous global IT security standards. The assurance programs with which AWS complies include, but are not limited to:

• SOC 1/ISAE 3402, SOC 2, SOC 3
• FISMA, DIACAP, and FedRAMP
• PCI DSS Level 1
• ISO 9001, ISO 27001, ISO 27017, ISO 27018

5. Core Security Controls

In alignment with industry best practices and Cyber Essentials Plus, Hertzian strictly enforces the following technical controls:

• Firewalls and Gateways: We use advanced firewalls to protect our internet connection. This serves as our first line of defense against unauthorized intrusions from the internet.
• Secure Configuration: We choose the most appropriate, secure settings for all our devices and software. We ensure all hardware and software is properly configured upon setup to remove vulnerabilities and provide effective protection.
• Access Control: We tightly control who has access to your data and our services. We restrict system access strictly to trusted users and sources, operating on a principle of "least privilege" so staff only have access to the data required for their specific roles.
• Malware Protection: We protect our ecosystem from viruses and other malware. We utilize enterprise-grade anti-virus and anti-malware products that regularly scan our network to prevent, detect, and isolate potential threats.
• Patch Management: We keep all software, firmware, and devices up-to-date. Regular patching and updates are enforced across our infrastructure to quickly resolve bugs and close known security vulnerabilities.

6. Data Backup and Resiliency

We routinely and securely backup our data. Maintaining regular, automated backups of all critical data ensures that our systems can be rapidly restored in the event of a disaster, localized failure, or ransomware infection, minimizing downtime and preventing data loss.

7. Contact Us

If you have any questions, concerns, or require further details regarding our Data Security Policy, please contact our team at: