Custom Application Development
Technologies we use
Built-in Security & Privacy
- Data & App decoupled.
- Stateless application – allows multiple EC2 instances behind a load balancer.
- AWS Cloudfront CDN for responsive app.
- AWS API Gateway to prevent DOS.
- Enable HSTS configuration
- Ionic HTTPS certificate pinning – pin the certificate to the mobile app.
- PII & passwords encrypted.
- Implement AWS Cognito.
- Email & mobile optional at registration.
- User permission required to capture close-contact interactions.
- Location tracked only during an interaction, and only after a user approves.
- Interactions deleted after 21 days.
- In-app profile & data delete option.
- Notification for risk score access.
- Notifications if interactions are created.
- User approval required to share data with corporations.