Security at Uniformly

Security is the foundation of our product design. We understand that uniform inventory, employee schedules, and property listings are sensitive. Uniformly utilizes state-of-the-art security, authentication, and isolation mechanisms to secure your data.

1. Data Transport and Encryption

• In Transit: All data transmitted between your browser and our platform gateways is encrypted using industry-leading Secure Sockets Layer (HTTPS/TLS 1.2 or higher) channels.
• At Rest: We utilize strong AES-256 encryption for data at rest within our databases to ensure data remains secure even in physical storage layers.
• Database Hashing: User passwords are encrypted using bcrypt hashing algorithms. Sensitive session states are generated dynamically with secure JWT algorithms.

2. Tenant Isolation and Access Controls

Uniformly is designed as a multi-tenant platform with rigorous database filters (Row-Level Security) to guarantee complete privacy. A tenant user can never query or view the database records, departments, wardrobe logs, or inventory files of any other hospitality property.

Furthermore, we strictly adhere to the principle of least privilege internally. Access to production systems is restricted to authorized engineering personnel and mandates Multi-Factor Authentication (MFA). Access logs are constantly monitored for suspicious activity.

3. Infrastructure and Operations

Uniformly is hosted on highly reliable, secure cloud infrastructure providers compliant with global standards (such as SOC 2 and ISO 27001). Our network architecture utilizes robust firewalls, isolated VPCs, and routine vulnerability scanning to prevent unauthorized access.

4. SAML 2.0 Single Sign-On (SSO)

For large hotel networks and enterprises, Uniformly natively supports SAML 2.0 Single Sign-On (SSO) integrations, including Microsoft Azure AD, Okta, and Ping Identity. This guarantees strict compliance with your internal IT security policies, department role maps, and automated offboarding cycles.

5. Payment Security & Compliance

Our payment infrastructure is powered exclusively by Stripe. We operate under rigorous PCI-DSS compliance standards. All transaction details, card handling, and recurring checkouts occur within Stripe's highly hardened environments.

6. Security Audits & Incident Response

Our platform undergoes continuous code security hardening and automated dependency scanning. In the rare event of a security incident, our established incident response protocol ensures rapid identification, containment, and transparent communication with affected parties. If you detect any potential vulnerability or would like to request our full compliance/architectural audit sheets, please email [email protected].