How Safe is TurboPass?

See our FTC Safeguards Rule, Security Commitment, Compliance and more!

OUR COMMITMENT

TurboPass is committed to conducting business in compliance with FTC Safeguard Rule. We are guided in this commitment by our basic core values,  code of conduct, and business ethics as well as a robust Security Program that is designed to Safeguard the Non-public information of our consumers, their customers, our employees and partners.

Our organization uses the guidelines set in place by NIST (National Institute of Standards and Technology) and the FTC to design and implement our security framework. This includes a full risk assessment under the guidance of Security Rangers, leaders in the security industry and SOC 2 evaluation, a stringent and detailed audit designed by the AICPA to establish trust between service providers and their customers.

TurboPass is SOC 2 Type I Audited

-Our organization regularly conducts penetration "PEN" testing to determine vulnerabilities and takes action to correct and mitigate these findings based on severity.

Policies in place include but are not limited to:

• Data Protection Policy
  
• Cybersecurity Policy
  
• Employee Internet Usage Policy
  
• Company Device Policy
  
• Progressive Discipline Policy
  
• Customer and Consumer Privacy Policies

-Our organization thoroughly vets potential
service providers by taking steps to ensure that... 

• Payment processing providers are PCI compliant at the
  highest level.
• All Providers sign a vendor agreement that stipulates that they remain in compliance in order to continue to do business with TurboPass
• All providers must have up-to-date documentation of continued compliance

-Our security and development teams work hard
every day to assess and modify security controls. This
includes... 

• Continuous monitoring of our application,
• A robust antivirus, anti-malware, quarantine process, and firewall
  
  

-Our organization thoroughly vets potential
service providers by taking steps to ensure that...

• Regular penetration "PEN" testing and tracking
• Incident Response Plan
• Incident Survey
• Chain of Custody Procedure
• Regular security training organization wide