Security Policy.

1. Data Encryption & Protocols

Backlinky enforces Secure Socket Layer (SSL) encryption with modern TLS 1.3 protocols across all platform interfaces, forms, and client portals. All network transactions and campaign tracking submissions are encrypted in transit.

Dynamic database backups and persistent logs are encrypted at rest utilizing AES-256 standard encryption keys.

2. Cloud Infrastructure & VPC Protection

Our database engines and web servers are hosted inside private, isolated Virtual Private Clouds (VPCs). Public traffic is routed exclusively through stateful Application Load Balancers (ALBs) equipped with DDoS mitigation safeguards. Access to server command interfaces is restricted by strict SSH key constraints and MFA authentication gates.

3. Account and Database Security

Client portal accounts are protected using salted password hashing algorithms (bcrypt/argon2).

• Access Controls: Database clusters are hosted behind isolated VPC network firewalls. Administrative access to raw customer databases is strictly monitored and limited based on the principle of least privilege.
• Automatic Backups: Encryption at rest is applied to all database backups, which are run daily and stored in separate cloud zones.

4. PCI-Compliant Payment Transactions

Backlinky processes subscription payments and single link checkout via trusted billing platforms (Stripe / PayPal) that comply with Level 1 PCI-DSS requirements. Backlinky server systems do not store, process, or view credit card numbers directly. All credit card tokens are transmitted securely to payment gateways.

5. Disaster Recovery & Availability SLA

We operate database snapshots and mirror server configurations to ensure maximum uptime for our portal dashboard tracking. In the event of primary server disruptions, automated DNS failovers route web traffic to backup infrastructure.

6. Vulnerability Disclosure

We value the participation of cybersecurity researchers in keeping our marketplace secure. If you discover a vulnerability or security flaw in the Backlinky platform:

• Report details to help@backlinky.co before public disclosure.
• Do not perform load testing (DDoS), data scraping, or execute exploits on production client data.
• Our security engineers will review and respond to valid, responsible vulnerability reports within 24 hours.