Security

Product Security Features

Single Sign-On
Single Sign-On (SSO), is where users who belong to a company can sign into s...
Domain Allowlisting
If you’re looking for an added level of security, workspaces can be configur...
Project Access Control
We are committed to protecting the work that our customers trust us to store...
Passwords
Ballpark employs industry-standard techniques for password management, encry...
User roles and permissions
Ballpark users can be given different levels of access to a workspace and it...

Incident Response
Incident response plan Ballpark has a documented incident response plan that...
Vulnerability Disclosure
Ballpark’s security team works closely with the community to rapidly investi...
Software Development Lifecycle
Continuous Delivery Ballpark's software development methodology is one of co...
Vulnerability Management
Ballpark will consider all potential vulnerabilities applicable to a particu...
Access Controls
Access to software at Ballpark is strictly controlled by User Groups. In eac...
Ballpark Application Infrastructure
Ballpark uses industry-standard cloud-based infrastructure to provide the Ba...

Personal Data - Who is responsible for it?
This sets out some high level answers to the obligations you and Ballpark ea...
Data Subprocessors
To support delivery of our Services, Ballpark may engage and use data proces...
Data Breach Disclosure
We have put in place appropriate security measures to prevent your personal ...
Data Retention
We will only retain your personal data for as long as necessary to fulfil th...
Data Encryption
At Ballpark we take the security and privacy of our user's data very serious...
Our GDPR Compliance
A new standard of data protection called GDPR took effect across the EU (on ...

Data Portability
Here at Ballpark, we are committed to providing data portability and managem...
High Availability
Continuous monitoring We have continuous monitoring, logging, and alerting i...
Backup Policy
Ballpark's Backups Policy covers everything relating to customer data within...
Business Continuity
Ballpark's Business Continuity Plan Ballpark has a structured business conti...
Disaster Recovery
The objective of Ballpark's disaster recovery plan is to: mobilise a core g...
Insurance
Ballpark (a trading name of Marvel Prototyping) uses Hiscox Insurance as our...

Confidentiality Agreements
All Ballpark employee and contractor agreements include a confidentiality ag...
Vendor Management
Ballpark relies on vendors to perform a number of services, most of which ar...
Security Policies
Ballpark is a trading name of Marvel Prototyping Limited (a company incorpor...
Risk Management
Risk management is considered a key cultural objective of Ballpark as an org...
Security Training
How successfully we are able to protect the identifying data we come into co...
Physical Security
The systems and infrastructure used by Ballpark to provide its service are c...

PCI DSS
Ballpark does not store any credit card information. All payments made to Ba...