Security

Our approach

CoachPro Tools applies appropriate technical and organizational measures to provide a level of security appropriate to the risk. The platform is built on leading infrastructure providers that maintain recognized security certifications, such as SOC 2 and ISO 27001 where applicable.

Encryption

Communications with the platform use secure protocols (HTTPS/TLS). Stored data is protected through the encryption-at-rest controls provided by our infrastructure vendors.

Access control

• User authentication with individual credentials and password management practices.
• Secure sign-in, including Google OAuth where enabled.
• Subscription validation at the access perimeter so only authorized users can access content.
• Internal access to data is limited to personnel with a strict need to know and confidentiality obligations.

Segregation and minimization

Data is logically segregated by customer account so each coach only accesses their own account data. We apply privacy by design and privacy by default, collecting only the data needed to provide the service.

Backups and continuity

The infrastructure performs periodic backups and includes recovery mechanisms managed through the platform vendors to preserve data availability and integrity.

Traceability

Access and relevant activity are logged to support traceability, detect misuse, and respond to incidents.

Incident management

If a personal data breach occurs, CoachPro Tools will notify the affected customer without undue delay and, where feasible, within seventy-two (72) hours after becoming aware of it, as described in the DPA.

Local device storage

Some tools save work progress in the browser local storage of the device being used. That information remains on the user's device; we recommend reasonable device security precautions such as screen lock and trusted devices.

Reporting security issues

If you detect a potential vulnerability or security incident, please report it responsibly.