Built for enterprise. Secured for the frontline.
1st90 is committed to the highest standards of data security, privacy, and compliance — so your organization can deploy with confidence at any scale.
Enterprise-grade security standards.
Your data is protected at every layer.
Encryption
All data is encrypted in transit using TLS 1.2+ and at rest using AES-256 encryption. No exceptions.
Access Controls
Role-based access controls (RBAC) ensure that only authorized personnel can access organizational data. All access is logged and auditable.
Infrastructure
1st90 is hosted on AWS with SOC 2 certified infrastructure, multi-region redundancy, and 99.9% uptime SLA. Regular penetration testing and vulnerability assessments are conducted by independent third parties.
We don't sell your data. Ever.
1st90 collects only the data necessary to deliver our service. We never sell, rent, or share your organizational data with third parties for advertising or commercial purposes. Your data is yours — we are simply the custodian.
- Program engagement data
- Behavior completion data
- Manager dashboard analytics
- User profile information
- Sensitive personal data beyond what is necessary
- Financial information
- Health records outside of approved clinical programs
Deployed by the world's most security-conscious organizations.
Have a security or compliance question?
Our security team responds to all inquiries within one business day. For vendor security assessments, penetration test reports, or data processing agreements, contact us directly.