Security
Version 1 · Last updated: July 4, 2026
Security practices for the Audit Hound service, operated by Teton Group, LLC, a Michigan limited liability company doing business as EASE Compliance Advisors. Questions or vulnerability reports: info@EASEca.com, subject line Security.
Payments
All payments run through Stripe Checkout and the Stripe customer portal. Card data is entered directly with Stripe, a PCI DSS Level 1 service provider, and never touches Audit Hound servers. Webhook messages from Stripe are verified with signed secrets before processing, and event processing is idempotent.
Infrastructure
The service is hosted on Amazon Web Services. All traffic is encrypted in transit with TLS. Data is encrypted at rest using managed encryption on our databases and storage. Environments are separated, and production access is restricted to authorized personnel using least-privilege credentials with multi-factor authentication.
Application security
Integrations between the storefront and the compliance platform authenticate with scoped API keys over HTTPS, and platform callbacks are verified with HMAC signatures. Internal jobs and administrative endpoints require secrets that are stored in managed secret storage, not in code. Dependencies are updated regularly and the codebase is reviewed before release.
Data handling
Audit Hound reviews publicly available marketing content only; we do not request or store passwords to officers' social media accounts. Reports are confidential, delivered to the client's designated recipients, and access within EASE is limited to personnel involved in the engagement.
Responsible disclosure
If you believe you have found a security vulnerability in the service, email info@EASEca.com with the details. We will acknowledge reports promptly, investigate, and keep you informed. Please do not access data that is not yours or disrupt the service while researching.