Traista uses TLS for data in transit and encryption at rest in its database and file storage. Encryption is one safeguard, not a guarantee against unauthorised access.
Lost-item photos are kept in private storage with access controls. Keep claim references and access links private, and share them only with people authorised to use them.
Traista is a fully hosted service — nothing is installed in your environment, and we never require access to your own systems or network. Each organization’s data is logically separated and access-scoped to that organization.
Traista uses cloud infrastructure for hosting and storage. A cloud provider's audit or certification does not certify Traista itself.
Payments are processed by Stripe at PCI DSS Level 1, the highest tier. Traista never stores card numbers.
Passwords are stored as one-way hashes, and login forms use reCAPTCHA to help detect bots. Staff access is scoped to assigned locations; organization administrators can access all of their organization's locations.
Uploaded images are re-encoded to help reduce risks from embedded content and remove metadata such as photo GPS location. Security headers provide additional browser protections. These measures do not eliminate every risk.
Report a security issue: security@traista.com
Talk to us about security