We take the responsibility of protecting your sensitive data documents very seriously. From concept to development, we’ve engineered the bubbl. platform from the ground up around the best security practices in the market. Built from scratch, there are no legacy systems that are known to be subjected to breaches and threats. We work with the best security companies in the game and subject ourselves to stringent audits to ensure our code and business function at their best to meet and even exceed industry standards to ensure the protection of your data.
We continually evaluate and seek to improve our security technology and procedures and our team works hard to ensure that bubbl.’s platform is the most secure way to confidently store everything important in your life.
Our mission is to build the most secure organisation in the world, ensuring our members have a private and secure place to keep all of their important information.
The security programme at bubbl. protects our organisation and your data at every turn, by utilising a combination of industry-leading security infrastructure and responsible data practices, as well as security and privacy best practices, to stay ahead of the evolving number of threats facing Internet services and infrastructure.
Our security programme is focused on the following domains:
Internal Information Security Programme: We strive to increase security and reduce risk within bubbl.’s digital environment. We proactively build secure access protocols and network architecture to enable systematic control of internal access to bubbl.’s facilities, systems and resources, using the least privilege paradigm. bubbl. enforces the use of two-factor authentication (2FA), internally.
Application/Infrastructure Security: Security is engineered and integrated at all levels of our development lifecycle to help enable the creation of better, safer products, as well as to ensure secure design and engineering principles. Our applications and systems, including new features, code and configuration changes, pass through extensive security design reviews and assessments by our internal teams. Additionally, many of these applications and systems undergo routine independent and rigorous pen tests through reputable third-party security experts.
Governance, Risk and Compliance: At bubbl., security awareness begins on day one and is a continuous process thereafter. All employees undergo security and privacy training the moment they start, as well as annually. Security is everyone’s responsibility at bubbl.. We have implemented and enforced physical, operational and technical controls, and enforced security policies and procedures, to secure our systems and member data. In addition to performing extensive internal security risk assessments, we also perform in-depth reviews of the security posture of our third-party vendors.
Alert Team / Offensive Security: Our internal Alert Team identifies previously unknown security vulnerabilities in existing systems and workflows through offensive security testing. This group simulates real-world attacks on all areas of the company and prioritises up-leveling security posture to address areas of greatest risk. Our goal is to gain insight into potential exposures, and to continuously test to reduce the likelihood of a breach.
Monitoring and Threat Management: Access to our infrastructure and systems is continuously logged and monitored. Our security monitoring, investigation, threat hunting and response programme ensures that we are alerted about, and appropriately investigate, triage and remediate security events.
Password
All accounts require strong passwords to access and view your data. We ensure strong passwords by increasing the number of characters and numbers and symbols to enhance security. A more complex and lengthier password makes it more difficult for bots and attackers to crack.
Identity verification
Emails need to be verified before any further information is added. Two-factor authentication is added as an extra layer of validation to ensure that you are who you say you are.
From the very start of your bubbl. journey, any information and documentation stored in your account are entirely yours. Only you and those with whom you share and account with have access to that information
Notifications
Each login attempt on your account is recorded and an email is sent to your account detailing the location and type of machine that has accessed your account. Should you get a notification with a login attempt that is not you, you can immediately lock your account by following a 1 click link.
Two-factor Authentication
bubbl. has two-factor authentication turned on by default, to verify your identity and allow you to log in and change account details.
Research suggests that an account is 99.9% less likely to be breached if you use two-factor authentication. By enabling two-factor authentication, you ensure that you are the only one who can access your account, even if someone else knows your password.
We work with several security providers and advisors to improve our core architecture. We only source services from industry experts and leading companies with global footprints in the cyber security space.
We welcome input from the security research community in identifying potential issues and ways to improve the security of our platform, infrastructure and member data. We encourage security researchers to responsibly disclose any potential vulnerabilities. We are committed to addressing security issues responsibly and in a timely manner. To protect our members, we request that you please refrain from sharing information about any potential vulnerabilities with anyone outside of bubbl. until we have had the opportunity to review and address them with you. We appreciate your help in keeping bubbl. secure for our members.
For questions, concerns or issues with your account please contact us on support@bubbl.life.
Where is my data stored?
Your data is encrypted and stored safely on servers hosted by Amazon Web Services (AWS). AWS, being a household name within the tech industry. We trust their security, speed, and reliability. They are meticulous in their pursuit of innovation and excellence. Boasting a wealth of tech industry expertise that is near impossible to compete with.
What happens if I close my account?
Should you choose to delete your bubbl. account, all of your data stored is immediately deleted for your professional adviser (id provided by a professional adviser). This process cannot be undone and is irreversible. You can delete your account through your account settings in the bubbl. platform.
Can bubbl. access my account in an emergency?
No, but we will be able to assist in notifying you and getting any Trusted Contacts that you have listed on your account to gain access. Should a Trusted Contact request access to your account, we will verify them first and notify you via your communication preferences as set in your profile (SMS, email, in App). We may also require documentation such as a death certificate and/or a letter of authority from an attorney.
Do I have to share my data with my professional adviser?
No, you’re always in control of the data you share – Rest assured, no sensitive or any specific account data (such as providers / account names / numbers / sort codes, etc) will be shared with your advisor. Only key financial metrics from the assets and liabilities you record in your bubbl. account, and whether or not you have critical life protection arrangements in place, such as a Will.
Data sharing with your advisors allows them to collaborate with you better and present opportunities on how they can get more involved in your finances and planning to better support you throughout your life.
Can bubbl. staff access my data
No – All files and information are encrypted, only you, the account owner can decrypt those files. Additionally, staff and team members at bubbl. are severely limited with access to any data on servers. Any maintenance that is required on the database from time to time is verified, approved by a director, and logged.
Our platform is designed to assist customers with keeping their data valid and current. For this, we have enabled customers to set expiry dates, reminders and action points on various types of information and /or documents. Our AI system uses this type of information to create value for our customers in the form of notifications, reminders and action points. This personalised assistance is what makes our platform valuable to our customers. With this, we still cannot decrypt the information contained within the vault, so the data remains secure.
Where can I report security issues?
We understand the value of privacy and the security of our customer’s data. If you suspect a security incident, report it as soon as possible so we can begin to investigate and mitigate any issues that may be identified.
You can report security incidents here: support@bubbl.life
