Harness Trust Center
Overview
Welcome to Harness's Trust Center. Our commitment to data privacy and security is embedded in every part of our business. Use this Trust Center to learn about our security posture and request access to our security documentation.
Harness partners with Very Good Security, Inc. (“VGS”) and Stripe, Inc. to capture, transfer, and store sensitive cardholder data.
VGS provides Harness and other financial institutions with managed data security services including tokenization as well as secure and compliant routing and storage of sensitive cardholder data. VGS eliminates the need for Harness to hold sensitive data by decoupling and insulating customer systems and applications from sensitive data. Data collected via VGS is segmented, aliased, and stored in secure vaults until needed.
Harness has been through rigorous vetting and inspection by VISA’s and MasterCard’s teams to ensure all data we receive is captured, transferred, and stored securely.
Risk Profile
Harness is reviewed and trusted by
Documents
Product Security
Reports
Self-Assessments
We are working on our security compliance. We can provide completed questionnaires upon request.
Data Security
App Security
We take application security seriously and are putting together a program to monitor internal apps.
Legal
Data Privacy
Privacy of customer data is top of mind. We follow industry best practices and follow all applicable privacy regulations.
Access Control
Access is tightly monitored and controlled at our company. We are happy to provide more details about our access control practices upon request.
Infrastructure
Endpoint Security
We follow industry best practices for endpoint security. We are happy to provide more details about our endpoint security practices upon request.
Network Security
Corporate Security
Policies
We are currently working with experts to put together our company policies. Please contact us for more details.
Security Grades
We are constantly monitoring the security of our website. We will post our grades from public security rating agencies when they become available.
If you think you may have discovered a vulnerability, please send us a note.