Governance
It all starts with our policies
Built on the foundation of SOC 2, HECVAT, and NIST, our policies focus on role-based access and least privileges needed. We review our policies regularly, conduct table top exercises to evaluate security, and communicate evolving policy standards company-wide.
Data Protection
Responsible stewardship
YOU data is encrypted in transit and at rest, with sensitive data stored in salted and hashed forms for added security. We collect the minimum necessary information to provide a personalized user experience, and anonymize our product analytics.
Product Hardening
Testing our security
Internally, we peer-review and scan our code during development to secure YOU as we make changes. Externally, we partner with third-parties for penetration testing and vulnerability scanning, ensuring our product stays ahead of constantly changing security demands.
Trusted Partners
Heroku
We host our database and content management system on Heroku, a managed service that provides both security and maintenance to YOU. With Heroku, we are able to ensure all data resides within the U.S., that only our team can access content hosted in our environment, and that we are scalable to support our growing network of partners.
Amazon Web Services
Using EC2 and S3 provided by AWS, our single sign-on servers and asset storage are protected by one of the leading cloud service providers. From high uptime, to the ability to manage geographically dispersed redundancies, AWS security helps us prepare for best case and worst case scenarios.
Vercel
Hosting our frontend web applications, Vercel is our partner of choice for providing fast and resilient web experiences. Their platform includes DDoS and Firewall protection to create end-to-end security for YOU. Combined with Heroku and AWS, we are able to provide granular security at each layer and separate internal access by role and platform.
YOU Security Culture
We believe everyone contributes to creating a secure organization and product!
100%
of company computers have endpoint protection, monitoring agents, and security settings enabled.
100%
of staff complete annual security awareness training, and accept policy changes.
100%
of building access is restricted to key fob entry or requires staff to grant access to visitors.
Privacy
Driving Behavior Change
Built on years of primary and secondary research, the YOU platform was developed by behavioral health experts as a scalable and effective solution for higher ed. Click below to learn more about YOU, and connect with us to explore how our research-backed technology powers steadfast behavior change for students at any institution.
YOU Platform Impact
Independent analysis shows that the YOU platform’s data-driven, science-backed model sets up individuals from diverse populations for long-term success. Want to learn more about our impact? Click below to explore data insights, testimonials, and research.
YOU Security Documentation
YOU Security Documentation
