Your Data Is Safe With Us
Pet care facilities trust Barklytic with sensitive information — pet health records, medication schedules, owner contact details, and business financials. We take that trust seriously and have built security into every layer of the platform from day one.
Security by Layer
Authentication & Access Control
- ✓Role-based access control (RBAC) — staff only see what they need
- ✓Session-based auth with secure, HTTP-only cookies
- ✓Multi-location isolation — locations cannot access each other's data
- ✓Org-level scoping enforced on every API call
- ✓Inactive session timeout with automatic sign-out
Data Protection
- ✓All data encrypted at rest using AES-256
- ✓All data encrypted in transit via TLS 1.3
- ✓Row-level security (RLS) policies on all database tables
- ✓Sensitive pet health and medication data handled with elevated access controls
- ✓Payment data never stored — processed via PCI-compliant providers
Infrastructure Security
- ✓Hosted on SOC 2 Type II compliant cloud infrastructure
- ✓Automated backups with point-in-time recovery
- ✓Geographic redundancy for high availability
- ✓Automated vulnerability scanning and dependency auditing
- ✓Infrastructure-as-code with version-controlled configuration
Monitoring & Incident Response
- ✓24/7 automated anomaly detection and alerting
- ✓Comprehensive audit logs for all data access and modifications
- ✓Defined incident response procedures with SLA targets
- ✓Security events logged and reviewed regularly
- ✓Rate limiting and abuse prevention on all public endpoints
Application Security
- ✓Input validation and sanitization throughout
- ✓Protection against OWASP Top 10 vulnerabilities
- ✓CSRF protection on all state-changing operations
- ✓Content Security Policy (CSP) headers enforced
- ✓Regular code reviews with security focus
Responsible AI
- ✓Scout AI operates only on your facility's own data
- ✓No cross-tenant data sharing for AI model inference
- ✓AI recommendations are advisory — humans remain in control
- ✓AI usage is auditable and transparent within your account
- ✓No customer data used to train external models
Your Data, Your Rules
We believe facilities should have full control and visibility into how their data is handled.
You own your data
Your facility data belongs to you. We are custodians, not owners. You can export or delete your data at any time.
No data selling
We do not sell, rent, or share your data with third parties for advertising or commercial purposes.
Minimal data collection
We collect only what's necessary to operate the platform. No telemetry beyond what you explicitly enable.
Transparent sub-processors
We maintain a list of third-party services that process your data on our behalf and their security posture.
Responsible Disclosure
If you believe you've found a security vulnerability in Barklytic, we want to hear from you. Please report it to us directly — we will acknowledge your report within 24 hours, investigate promptly, and keep you informed of our progress.
security@barklytic.io →Security questions or concerns?
We're happy to discuss our security posture in depth — including providing documentation for compliance reviews or enterprise due diligence.
Contact Our Security Team