ProfitLens Security & Data Protection
At ProfitLens, protecting agency data is a core design principle.
We use enterprise-grade cloud infrastructure, strong authentication controls, encrypted storage, and strict access policies to ensure your information remains secure and accessible only to authorized users.
Our security model is built around five key principles:
- Encryption – Data is protected both in storage and during transmission.
- Authentication – Users must verify their identity before accessing the platform.
- Authorization – Users can only access information they have permission to view.
- Data Isolation – Agencies' data is separated through database-level security controls.
- Monitoring & Accountability – Data access and system activity are logged and monitored.
How We Protect Your Data
Data Encryption
ProfitLens protects your information using encryption both at rest and in transit.
- All data stored within ProfitLens is encrypted at rest.
- Data transmitted between users and the platform is protected using industry-standard encryption protocols.
- Encryption helps safeguard sensitive agency information from unauthorized access.
Secure Storage & Processing
Reports uploaded to ProfitLens are stored in secure cloud infrastructure with audit logging enabled.
Audit logs provide visibility into data access and system activity, supporting accountability and security monitoring.
Uploaded report data is securely processed and stored within a protected database environment designed to limit access to authorized users and systems.
Authentication & Access Control
All users must authenticate before accessing ProfitLens.
Access is governed by role-based permissions and authorization policies. Users can only view information they have been granted permission to access. All application services and APIs also require authentication and authorization before data can be retrieved or modified.
Agency Data Separation
ProfitLens uses database-level security controls to maintain strict separation between agencies and users.
These controls are enforced directly within the database through row-level security, creating a hard boundary between organizations. Users can only access data they have been explicitly authorized to view.
Restricted Access to Production Data
Protecting production data extends beyond customer-facing security controls.
ProfitLens follows a principle of least privilege, limiting access to production environments and customer data to only those individuals who require it to perform their responsibilities.
As an additional security measure, development and testing activities are structured to minimize exposure to production data whenever possible. Team members involved in development, support, testing, and other non-production activities do not have routine access to customer production data.
This approach helps reduce risk while maintaining a secure development and support process.
Secure Operations
Infrastructure changes, software updates, and deployments are managed through automated and secured deployment pipelines. This reduces manual intervention, improves consistency, and helps minimize the risk of configuration errors.
Reliability & Performance
ProfitLens is built on a cloud architecture that automatically scales to meet demand, helping ensure consistent performance, reliability, and availability as usage grows.
Technology Platform
ProfitLens is hosted on Amazon Web Services (AWS) and leverages industry-standard technologies, including:
| Function | Technology |
|---|---|
| Secure File Storage | Amazon S3 |
| Application Database | Amazon Aurora PostgreSQL |
| User Authentication & Identity Management | Amazon Cognito |
| Web Application Hosting | Amazon S3 & Amazon CloudFront |
| Application Services & APIs | AWS Fargate |
| Source Code Management | GitHub |
| Continuous Integration & Deployment | GitHub Actions |
All components are deployed using automated, secure deployment pipelines and are designed to scale automatically as demand increases.
Key Security Controls
ProfitLens employs multiple layers of security, including:
- Encryption of data at rest
- Encryption of data in transit
- Authenticated user access
- Role-based access controls
- Permission-based authorization
- Database row-level security
- Agency data isolation
- Restricted production data access
- Audit logging and monitoring
- Secure automated deployments
- API authentication and authorization
- Enterprise cloud infrastructure hosted on AWS
Frequently Asked Questions
Where is ProfitLens data stored?
ProfitLens data is hosted within Amazon Web Services (AWS) using secure cloud storage and database services.
Is my data encrypted?
Yes. All data stored within ProfitLens is encrypted at rest, and data transmitted between users and the platform is encrypted in transit.
Can another agency see my data?
No. ProfitLens uses authorization controls and database-level security to ensure users can only access the data they have been granted permission to view.
How is user access controlled?
Users must authenticate before accessing ProfitLens. Permissions are assigned based on user roles and are enforced at both the application and database levels.
Do developers have access to customer data?
ProfitLens maintains strict controls around production data access. Team members involved in development, testing, and other non-production activities do not have routine access to customer production data. Access is restricted based on role, business need, and authorization policies.
Are data access activities monitored?
Yes. Audit logging is maintained for data access and related system activities to support security monitoring and accountability.
How does ProfitLens separate agency data?
ProfitLens uses database row-level security and permission-based access controls to create strict separation between agencies and users.
What cloud platform does ProfitLens use?
ProfitLens is hosted on Amazon Web Services (AWS) using enterprise-grade services for storage, authentication, databases, hosting, and application services.
Who should I contact with security questions?
If you have questions regarding security, access controls, or data handling practices, please contact the ProfitLens Support Team.
Questions about security?
We understand that protecting agency and client data is critical. If your agency requires additional information regarding security controls, infrastructure, or data handling practices, please contact the ProfitLens Support Team. We're happy to discuss our approach to protecting your information.
