Security

Our Security Commitment

At Busable, we understand that the security of your data is critical to your business operations. We are committed to implementing and maintaining the highest standards of security to protect your information, your customers' data, and your business continuity.

Our security practices are designed to meet or exceed industry standards and regulatory requirements, ensuring that your bus management operations remain secure and compliant.

Data Protection

We implement comprehensive data protection measures to safeguard your information:

• Encryption: All data is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption
• Access Controls: Multi-factor authentication and role-based access controls
• Data Backup: Regular automated backups with point-in-time recovery capabilities
• Data Residency: Data stored in secure Australian data centers
• Data Retention: Configurable retention policies with secure deletion procedures

Infrastructure Security

Our cloud infrastructure is built with security as a fundamental principle:

• Cloud Security: Built on AWS with enterprise-grade security features
• Network Security: DDoS protection, firewalls, and intrusion detection systems
• Vulnerability Management: Regular security scans and automated vulnerability assessments
• Patch Management: Automated security updates and patch deployment
• Monitoring: 24/7 security monitoring and alerting systems

Application Security

Our development and deployment processes prioritize security:

• Secure Development: OWASP guidelines and secure coding practices
• Code Review: Mandatory security reviews for all code changes
• Penetration Testing: Regular third-party security assessments
• API Security: Rate limiting, authentication, and authorization controls
• Input Validation: Comprehensive input sanitization and validation

Compliance and Certifications

We maintain compliance with relevant security standards and regulations:

• ISO 27001: Information Security Management System certification
• SOC 2 Type II: Security, availability, and confidentiality controls
• GDPR Compliance: European data protection regulations
• Australian Privacy Principles: Compliance with Australian privacy laws
• Industry Standards: Adherence to transport industry security requirements

Incident Response

We have established incident response procedures to handle security events:

• 24/7 Monitoring: Continuous security monitoring and threat detection
• Response Team: Dedicated security incident response team
• Communication: Timely notification of security incidents to affected customers
• Recovery: Rapid incident containment and system recovery procedures
• Post-Incident: Comprehensive analysis and improvement of security measures

Customer Security Responsibilities

While we provide robust security measures, customers also have important responsibilities:

• Maintain strong, unique passwords for user accounts
• Enable multi-factor authentication where available
• Regularly review and update user access permissions
• Report suspicious activities or security concerns immediately
• Keep local systems and browsers updated with security patches
• Train staff on security best practices and phishing awareness

Security Features for Transport Operations

Our platform includes specialized security features for transport operations:

• Driver Authentication: Secure driver login and identity verification
• GPS Tracking Security: Encrypted location data transmission
• Passenger Data Protection: Secure handling of passenger information
• Audit Trails: Comprehensive logging of all system activities
• Emergency Protocols: Secure emergency communication systems

Security Updates and Maintenance

We regularly update our security measures to address emerging threats:

• Monthly security updates and patches
• Quarterly security assessments and penetration testing
• Annual security policy reviews and updates
• Continuous monitoring of emerging security threats
• Regular staff security training and awareness programs

Security Contact Information

For security-related inquiries, incidents, or concerns:

Last updated: 6 August 2025