Technical FAQs - Cribber

Technical FAQs

Technical detail about Cribber for your IT and security teams.

Find out more

FAQs

What security parameters are in place for protecting our data in the cloud?

  • The Amazon Web Service is accredited to SSAE 16 Type II, ISAE 3402 Type II and ISO 27001:2005 standards.
  • Cribber does not store or cache financial data used in conjunction with automated client billing through the Cribber platform.
  • Financial data storage and processing is performed by Stripe. Data transmission is secured through industry standard SSL/TLS encryption.
  • Stripe is PCI-compliant to PCI Service Provider Level 1 - VISA Listing.
  • Cribber utilizes Hypertext Transfer Protocol (HTTP), using standard encryption technologies, for all client communications. Content is served directly from a single Virtual IP (VIP) address using the Cribber SSL Certificate by Cribber’s application servers.
  • Cribber employs Secure Socket Layer (SSL)/Transport Layer Security (TLS). The use of SSL/TLS is mandatory for all content-serving connections.

How frequent are updates and patches?

Fully tested updates and patches to the web application occur daily. Similar updates to the mobile apps occur every 2 weeks.

What methods do you use to inform customers of vulnerabilities?

  • Registered customers have vulnerability information disclosed to them immediately, even before a patch is ready.
  • Customers will receive information via email.

What are the terms and period of your security support agreement?

We ensure that all critical security defects will be fixed within one week of discovery.

Are there any ULA agreements required to be signed by users to download the software?

  • Cribber mobile app users are required to agree to our terms of service before creating an account. Similarly admin users agree to the same terms of service on creation of a company account.
  • The Cribber iOS app is covered by a Standard EULA as provided by Apple.

Is there support documentation for users?

Yes, support documentation is available here.