1. Security governance
Security relies on an internal policy reviewed regularly. Access follows the least-privilege principle, staff are trained and each sub-processor is assessed before onboarding.
2. Encryption (in transit and at rest)
- In transit: TLS 1.2+ (HTTPS) for all communications.
- At rest: encrypted databases and backups (AES-256).
- Reinforced encryption and restricted access for sensitive data (health, photos).
- Secure key management with regular rotation.
3. Access and authentication
- Multi-factor authentication (MFA) available and recommended.
- Passwords stored as salted hashes (bcrypt/argon2), never in clear text.
- Role-based access control (RBAC), separation of environments.
- Access logging and periodic review of permissions.
4. Backups and continuity (RPO/RTO)
- Daily encrypted backups, retained up to 30 days.
- Recovery Point Objective (RPO): 24 h maximum.
- Recovery Time Objective (RTO): restoration within 24 h after a major incident.
- Periodic restoration tests.
5. Vulnerability management
Patches applied according to criticality, OWASP recommendations followed, automated scans and periodic penetration tests. Responsible disclosure: security@bellisy.fr.
6. Incident management (data breach)
72 h notification. In the event of a breach likely to result in a risk, Bellisy notifies the CNIL within 72 hours and informs data subjects if the risk is high (Art. 33 and 34 GDPR). A response plan (detection, containment, eradication, recovery, lessons learned) is in place.
7. Payments and card data
- Payments processed by PCI-DSS certified providers (Stripe, PayPal).
- Bellisy never stores full card numbers; only secure tokens.
- Strong customer authentication (SCA / PSD2) applied where required.
- Refunds and disputes handled per the Refund & Cancellation Policy.