TRUST & SECURITY - happi5y.com

TRUST & SECURITY CENTER

At Happi5y, we partner with over 660 organizations to build cultures of mindfulness, resilience, and emotional wellbeing. Your trust is at the core of everything we do — it guides how we design our systems, protect your data, and deliver care with integrity. Together, we’re creating workplaces where people feel safe, supported, and empowered to thrive.

ISO/IEC 27001:2022 CERTIFICATION

At Happi5y, we are proud to be ISO/IEC 27001:2022 certified, an internationally recognized standard that defines best practices for information security management. This certification demonstrates our commitment to maintaining the highest standards of data protection and privacy.

The certification ensures that we have established a robust Information Security Management System (ISMS) — a comprehensive framework that manages risks, protects sensitive information, and continually improves our security processes.

The implementation of this standard at Happi5y has been independently audited and certified by SGS, one of the world’s most trusted auditing and certification bodies, reaffirming our dedication to safeguarding your data with integrity and transparency.

ENTERPRISE-GRADE SECURITY

At Happi5y, security and privacy are the foundation of everything we do to uphold and strengthen customer trust. We are deeply committed to protecting the confidentiality, integrity, availability, and security of all data we handle and process.
Our systems are built on enterprise-grade security frameworks, ensuring that every layer of our platform is safeguarded against emerging threats. Through continuous investment in advanced security infrastructure, regular audits, and proactive monitoring, we maintain the highest level of protection for our users and partners.

At Happi5y, trust isn’t assumed — it’s earned and reinforced every day through our unwavering commitment to your data security and privacy.

DATA SECURITY

Encryption

All confidential data is encrypted at rest using AES-256 and in transit using TLS 1.2, ensuring that sensitive information remains protected from unauthorized access at all times.

Virtual Private Cloud (VPC)

We operate within dedicated AWS Virtual Private Clouds, adding an extra layer of security. Connections outside the VPC are restricted to approved ports and whitelisted IP addresses, minimizing exposure and ensuring a tightly controlled environment.

Endpoint Security

All Happi5y devices are managed through enterprise-level device management and endpoint protection software, ensuring that every endpoint remains secure, updated, and compliant with our internal policies.

Access Control

We enforce role-based access controls (RBAC) that ensure segregation of duties and grant the minimum permissions necessary on a need-to-know basis. Access is reviewed and audited regularly to maintain security integrity.

DEVELOPMENT SECURITY

Version Control

Our source code is centrally managed using Atlassian Bitbucket, where every code change, check-in, and check-out is automatically logged and tracked. This ensures complete traceability and accountability across all development activities.

Penetration Testing

We conduct independent penetration testing and integrate automated security testing into our secure development practices. These continuous assessments help us identify, analyze, and mitigate vulnerabilities before they can impact our systems.

Code Review

Every code modification undergoes a formal review process aligned with industry best practices and coding standards. This ensures that all updates maintain high performance, security, and reliability.

Role-Based Access Control

Access to the production environment is strictly limited to a small set of authorized personnel based on job roles. All production access occurs through a secure management plane and is restricted to whitelisted IP addresses, ensuring end-to-end protection.

ARCHITECTURE SECURITY

Data Backup

Cloud backups are taken daily. Backups are stored in a different availability zone on a monthly basis by Happi5y.

AWS

At Happi5y, our fully AWS-based architecture ensures resilience and high availability for both the product and its data.

Load Balancing

At Happi5y, application traffic is automatically distributed across multiple availability zones, ensuring high availability, auto-scaling, and robust security.

PEOPLE SECURTIY

Background Verification

Happi5y has contracted an external agency to perform background checks for all its employees. These checks include identity verification, education verification, and previous employment verification.

Non-Disclosure Agreements

Happi5y requires all full-time employees and contractors to acknowledge and countersign Non-Disclosure Agreements (NDAs).

Regular Trainings

The Happi5y Information Security team conducts mandatory security awareness and training programs for all Happi5y employees. Additionally, we promote a culture of security awareness through periodic communications from senior management to all employees.