Information Security and Compliance

RocketReach operates in Amazon Web Services (AWS) using a Virtual Private Cloud (VPC) to securely transmit and store all customer information.

By default, RocketReach encrypts all data in transit and at rest. All connections are encrypted using secure web protocols (HTTPS / TLS 1.2+) and data is stored using symmetric encryption (AES-256-GCM) at rest.

Security is baked into all aspects of application development following CIS and OWASP standards.

We partner with leading third-party organizations to conduct thorough internal and external penetration tests to validate the security of the RocketReach platform.

Customer data is regularly backed up across multiple data center locations with a commitment to a 12-hour RPO and 24-hour RTO.

RocketReach employs a robust vulnerability management program to detect and remediate newly discovered security issues efficiently.

RocketReach maintains and regularly tests a robust Business Continuity Plan (BCP) to ensure availability of the platform and the protection of customer data.

RocketReach supports single sign-on via SAML 2.0 with support for multiple identity providers optionally configured with multi-factor authentication.

RocketReach’s engineering teams track the platform’s uptime and performance of using automated monitors and alerts to quickly resolve system issues. RocketReach publishes its historical uptime statistics on its public status page.