Is Basecamp reliable, secure, and confidential? Is our data safe? Where is the data hosted?

Millions of people and some of the world’s largest (and smallest) companies trust us with their data. We take this responsibility seriously.

We’ve detailed our basic security practices on this page:
http://37signals.com/security

We’ve also put together a security response page for security reports:
http://37signals.com/security-response

To be clear, nothing is 100% secure and anyone who guarantees 100% security is making a promise they can’t keep. Banks, government computers, and corporations that spend billions on security can be compromised by highly motivated individuals.

What we can promise is that we take all reasonable precautions to keep your data safe. We’ve worked with top security researchers to audit our own code and infrastructure. Our infrastructure itself is set up by professionals with many years of experience in security. We don’t expose our application or database servers directly to the Internet. Everything goes through a firewall.

Servers are protected around-the-clock, with interior and exterior surveillance monitoring. Only authorized personnel have access to the data center. 24/7/365 onsite staff provides additional protection against unauthorized entry and security breaches.

Learn more about our security practices.

You can also review our privacy policy for more info on how your data is stored.