Security

We take security very seriously. We have designed Pluno, not only using industry leading system architecture and encryption, but we go one step further. Using Pluno means no more DMs, protecting your users from scammers and making things more secure for your community.

Internal system

• We use Google Cloud Platform to host the application and the database.
• Communication channels are enforcing the latest version of TLS.
• Internal policy is to use 2FA for all systems.
• Access to all sensitive data is restricted internally

Database

• Encryption: messages in our database are encrypted at rest, which means our team cannot read or access your messages.
• Access: the database can only be accessed by whitelisting the IP which we only do when access is needed and remove as soon as we no longer need it. IP whitelisting can only be done by the CTO.

Integrations

We always aim to minimize the permissions we require when integrating with your social channels.

Our Discord bot does not require admin permission, instead it only needs the following permissions:

• Send Messages
• Embed Links
• Read Message History

User authorization

We do user authorization via OAuth2, the ****industry-standard protocol for authorization.

Read more about OAuth2 here.