Deprecated: Hook jetpack_pre_connection_prompt_helpers is deprecated since version jetpack-13.2.0 with no alternative available. in /hermes/bosnacweb04/bosnacweb04ay/b1602/nf.whysel/public_html/decisionfish.com/wp-includes/functions.php on line 6078

Warning: Cannot modify header information - headers already sent by (output started at /hermes/bosnacweb04/bosnacweb04ay/b1602/nf.whysel/public_html/decisionfish.com/wp-includes/functions.php:6078) in /hermes/bosnacweb04/bosnacweb04ay/b1602/nf.whysel/public_html/decisionfish.com/wp-includes/rest-api/class-wp-rest-server.php on line 1831

Warning: Cannot modify header information - headers already sent by (output started at /hermes/bosnacweb04/bosnacweb04ay/b1602/nf.whysel/public_html/decisionfish.com/wp-includes/functions.php:6078) in /hermes/bosnacweb04/bosnacweb04ay/b1602/nf.whysel/public_html/decisionfish.com/wp-includes/rest-api/class-wp-rest-server.php on line 1831

Warning: Cannot modify header information - headers already sent by (output started at /hermes/bosnacweb04/bosnacweb04ay/b1602/nf.whysel/public_html/decisionfish.com/wp-includes/functions.php:6078) in /hermes/bosnacweb04/bosnacweb04ay/b1602/nf.whysel/public_html/decisionfish.com/wp-includes/rest-api/class-wp-rest-server.php on line 1831

Warning: Cannot modify header information - headers already sent by (output started at /hermes/bosnacweb04/bosnacweb04ay/b1602/nf.whysel/public_html/decisionfish.com/wp-includes/functions.php:6078) in /hermes/bosnacweb04/bosnacweb04ay/b1602/nf.whysel/public_html/decisionfish.com/wp-includes/rest-api/class-wp-rest-server.php on line 1831

Warning: Cannot modify header information - headers already sent by (output started at /hermes/bosnacweb04/bosnacweb04ay/b1602/nf.whysel/public_html/decisionfish.com/wp-includes/functions.php:6078) in /hermes/bosnacweb04/bosnacweb04ay/b1602/nf.whysel/public_html/decisionfish.com/wp-includes/rest-api/class-wp-rest-server.php on line 1831

Warning: Cannot modify header information - headers already sent by (output started at /hermes/bosnacweb04/bosnacweb04ay/b1602/nf.whysel/public_html/decisionfish.com/wp-includes/functions.php:6078) in /hermes/bosnacweb04/bosnacweb04ay/b1602/nf.whysel/public_html/decisionfish.com/wp-includes/rest-api/class-wp-rest-server.php on line 1831

Warning: Cannot modify header information - headers already sent by (output started at /hermes/bosnacweb04/bosnacweb04ay/b1602/nf.whysel/public_html/decisionfish.com/wp-includes/functions.php:6078) in /hermes/bosnacweb04/bosnacweb04ay/b1602/nf.whysel/public_html/decisionfish.com/wp-includes/rest-api/class-wp-rest-server.php on line 1831

Warning: Cannot modify header information - headers already sent by (output started at /hermes/bosnacweb04/bosnacweb04ay/b1602/nf.whysel/public_html/decisionfish.com/wp-includes/functions.php:6078) in /hermes/bosnacweb04/bosnacweb04ay/b1602/nf.whysel/public_html/decisionfish.com/wp-includes/rest-api/class-wp-rest-server.php on line 1831
{"id":3043,"date":"2018-01-24T16:04:37","date_gmt":"2018-01-24T21:04:37","guid":{"rendered":"http:\/\/www.decisionfish.com\/?page_id=3043"},"modified":"2022-07-31T19:27:10","modified_gmt":"2022-07-31T23:27:10","slug":"security-policy","status":"publish","type":"page","link":"https:\/\/www.decisionfish.com\/security-policy\/","title":{"rendered":"Security Policy"},"content":{"rendered":"<h2>Introduction<\/h2>\n<ul>\n<li>We at Decision Fish LLC take security extremely seriously. We have made a significant investment in security precautions for Decision Fish at app.decisionfish.com (\u201cDF\u201d). This includes addressing relevant web application security risks, including the <a href=\"https:\/\/www.owasp.org\/index.php\/Category:OWASP_Top_Ten_Project\">2017 OWASP Top 10<\/a>, the Identity Ecosystem Steering Group privacy and security requirements for protecting personally identifiable data, and other security precautions.<\/li>\n<\/ul>\n<h2>Security Audits<\/h2>\n<ul>\n<li>We have hired an outside security consultant to: 1. Identify application risks including how data flows to third parties and how data is stored; 2. make recommendations on strategies to improve security currently and to implement best practices for future development; and 3. perform a risk assessment to identify risk to the application and its data. We completed the initial analysis and implemented all its recommendations in February 2018.<\/li>\n<li>We intend to complete similar assessments annually or after major code releases. We also incorporate a security model around our development and deployment process including performing static code analysis (by computer) and code review (by humans) prior to every release.<\/li>\n<\/ul>\n<h2>Platform Security<\/h2>\n<ul>\n<li>We begin with a robust approach to the platforms and systems on which app.decisionfish.com is built. Our hosting environment is Amazon Web Services (\u201cAWS\u201d), an industry leader in secure cloud services. We also utilize multi-factor (more than one category of credentials is required to login) and audited AWS login procedures. You can read the AWS security policy: <a href=\"https:\/\/aws.amazon.com\/security\/?hp=tile\">https:\/\/aws.amazon.com\/security\/?hp=tile<\/a>.<\/li>\n<\/ul>\n<h2>Application Security<\/h2>\n<ul>\n<li>We developed our application using the Ruby on Rails framework, which has many built-in features to help ensure application security.<\/li>\n<li>We adhere to application security best practices and continuously test for vulnerabilities and any defects in our code base including the <a href=\"https:\/\/www.owasp.org\/index.php\/Category:OWASP_Top_Ten_Project\">2017 OWASP Top 10<\/a>, which enumerates the top ten most common vulnerabilities in application security.<\/li>\n<\/ul>\n<h2>Data Security<\/h2>\n<ul>\n<li>We have made significant investments to help protect the privacy and security of your personally identifiable information and financial data. Your data is secured with industry-standard 128-bit encryption as it travels to and from our servers with SSL based on key pairs. This reduces the risk of brute-force attack.<\/li>\n<li>Decision Fish Employees normally don\u2019t access your data. However, a small number of technical staff have access to your personal or account data, as needed. An employee will only do so when you ask us to, for example to address a login problem, or when required by law. We document when we do this and why. All access to personal and account data is logged and audited.&nbsp; Please see our <a href=\"https:\/\/www.decisionfish.com\/privacy-policy\">Privacy Policy<\/a> to learn about how we may share data in aggregate and with personally identifiable information removed.<\/li>\n<li>In order to login to Decision Fish, you must use a registered email and mobile telephone number (two-factors). If a you fail to provide the correct code, we require increasingly long delays before another attempt can be made. We do not use passwords so there is no risk of someone stealing them. No one from Decision Fish will ever contact you to get access to your email or cellphone. We will always use <a href=\"https:\/\/app.decisionfish.com\">https:\/\/app.decisionfish.com<\/a> as the web address for you to use when logging in.<\/li>\n<li>We trust MX and their industry-leading security precautions to import data from your financial institutions. We do not ever access or store your banking credentials. Rather, when you connect to a financial institution, you are logging in using MX&#8217;s servers, not our servers. We use the Atrium API from MX to access financial account information. MX is SOC2 Type II compliant, PCI DSS compliant, and continually re-encrypts data to keep it safe. You can find their security policies and practices on their website at: <a href=\"https:\/\/www.mx.com\/resources\/2015\/7\/21\/security-at-mx-how-we-protect-your-data\">https:\/\/www.mx.com\/resources\/2015\/7\/21\/security-at-mx-how-we-protect-your-data<\/a><\/li>\n<li>Additionally, all actions on DF involving your financial institution accounts are non-transactional: Your money cannot be moved, withdrawn or accessed on our system.<\/li>\n<li>We use cookies to store information about the current session. These cookies expire after about 30 minutes of inactivity. We use Google Analytics cookies to track activity, define browser version, device, etc. We trust Google Cloud security protocols to protect this information. Google Analytics stores session data which we study to improve the user experience of our app. Since this may include potentially personally identifiable data such as your IP address, we are evaluating Google\u2019s suggestions for minimizing risk of exposure including the forthcoming GDPR requirements of the European Commission These data are accessible by a very small number of administrative staff and is never shared, except as described in our <a href=\"https:\/\/www.decisionfish.com\/privacy-policy\">Privacy Policy<\/a>. Read Google Analytics security and privacy policies: <a href=\"https:\/\/support.google.com\/analytics\/answer\/6004245\">https:\/\/support.google.com\/analytics\/answer\/6004245<\/a>. Read about Google\u2019s suggestions for GDPR compliance: <a href=\"https:\/\/www.google.com\/cloud\/security\/gdpr\/\">https:\/\/www.google.com\/cloud\/security\/gdpr\/<\/a>.<\/li>\n<li>Your data is stored by Decision Fish as long as you maintain an account with us. If you choose to delete your account, we will irreversibly destroy all of your data that are on our servers. If your subscription expires, we will destroy your data after 12 months.<\/li>\n<\/ul>\n<h2>Changes to this Policy<\/h2>\n<ul>\n<li>We&#8217;ll let you know if we make changes to this Security Policy by any of the notification methods set forth in our <a href=\"https:\/\/www.decisionfish.com\/Terms-of-Use\">Terms of Use<\/a>, under Changes to this Policy.<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>Introduction We at Decision Fish LLC take security extremely seriously. We have made a significant investment in security precautions for Decision Fish at app.decisionfish.com (\u201cDF\u201d). This includes addressing relevant web application security risks, including the 2017 OWASP Top 10, the Identity Ecosystem Steering Group privacy and security requirements for protecting personally identifiable data, and other &#8230; <a title=\"Security Policy\" class=\"read-more\" href=\"https:\/\/www.decisionfish.com\/security-policy\/\" aria-label=\"More on Security Policy\">Read more<\/a><\/p>\n","protected":false},"author":3,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"content-type":"","_exactmetrics_skip_tracking":false,"_exactmetrics_sitenote_active":false,"_exactmetrics_sitenote_note":"","_exactmetrics_sitenote_category":0,"footnotes":""},"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v21.5 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Security Policy &#8211; Decision Fish: Decide For Yourself<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.decisionfish.com\/security-policy\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Security Policy &#8211; Decision Fish: Decide For Yourself\" \/>\n<meta property=\"og:description\" content=\"Introduction We at Decision Fish LLC take security extremely seriously. We have made a significant investment in security precautions for Decision Fish at app.decisionfish.com (\u201cDF\u201d). This includes addressing relevant web application security risks, including the 2017 OWASP Top 10, the Identity Ecosystem Steering Group privacy and security requirements for protecting personally identifiable data, and other ... Read more\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.decisionfish.com\/security-policy\/\" \/>\n<meta property=\"og:site_name\" content=\"Decision Fish: Decide For Yourself\" \/>\n<meta property=\"article:publisher\" content=\"http:\/\/facebook.com\/decisionfish\" \/>\n<meta property=\"article:modified_time\" content=\"2022-07-31T23:27:10+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:site\" content=\"@decisionfish\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.decisionfish.com\/security-policy\/\",\"url\":\"https:\/\/www.decisionfish.com\/security-policy\/\",\"name\":\"Security Policy &#8211; Decision Fish: Decide For Yourself\",\"isPartOf\":{\"@id\":\"https:\/\/www.decisionfish.com\/#website\"},\"datePublished\":\"2018-01-24T21:04:37+00:00\",\"dateModified\":\"2022-07-31T23:27:10+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/www.decisionfish.com\/security-policy\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.decisionfish.com\/security-policy\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.decisionfish.com\/security-policy\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.decisionfish.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Security Policy\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.decisionfish.com\/#website\",\"url\":\"https:\/\/www.decisionfish.com\/\",\"name\":\"Decision Fish: Decide For Yourself\",\"description\":\"Decision Fish: Decide For Yourself\",\"publisher\":{\"@id\":\"https:\/\/www.decisionfish.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.decisionfish.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.decisionfish.com\/#organization\",\"name\":\"Decision Fish LLC\",\"url\":\"https:\/\/www.decisionfish.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.decisionfish.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/i0.wp.com\/www.decisionfish.com\/wp-content\/uploads\/2016\/02\/logo-final-vrcopy-page-large-e1455550951300.jpg?fit=1493%2C939\",\"contentUrl\":\"https:\/\/i0.wp.com\/www.decisionfish.com\/wp-content\/uploads\/2016\/02\/logo-final-vrcopy-page-large-e1455550951300.jpg?fit=1493%2C939\",\"width\":1493,\"height\":939,\"caption\":\"Decision Fish LLC\"},\"image\":{\"@id\":\"https:\/\/www.decisionfish.com\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"http:\/\/facebook.com\/decisionfish\",\"https:\/\/twitter.com\/decisionfish\",\"https:\/\/www.linkedin.com\/company\/decision-fish-llc\/\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Security Policy &#8211; Decision Fish: Decide For Yourself","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.decisionfish.com\/security-policy\/","og_locale":"en_US","og_type":"article","og_title":"Security Policy &#8211; Decision Fish: Decide For Yourself","og_description":"Introduction We at Decision Fish LLC take security extremely seriously. We have made a significant investment in security precautions for Decision Fish at app.decisionfish.com (\u201cDF\u201d). This includes addressing relevant web application security risks, including the 2017 OWASP Top 10, the Identity Ecosystem Steering Group privacy and security requirements for protecting personally identifiable data, and other ... Read more","og_url":"https:\/\/www.decisionfish.com\/security-policy\/","og_site_name":"Decision Fish: Decide For Yourself","article_publisher":"http:\/\/facebook.com\/decisionfish","article_modified_time":"2022-07-31T23:27:10+00:00","twitter_card":"summary_large_image","twitter_site":"@decisionfish","twitter_misc":{"Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.decisionfish.com\/security-policy\/","url":"https:\/\/www.decisionfish.com\/security-policy\/","name":"Security Policy &#8211; Decision Fish: Decide For Yourself","isPartOf":{"@id":"https:\/\/www.decisionfish.com\/#website"},"datePublished":"2018-01-24T21:04:37+00:00","dateModified":"2022-07-31T23:27:10+00:00","breadcrumb":{"@id":"https:\/\/www.decisionfish.com\/security-policy\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.decisionfish.com\/security-policy\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.decisionfish.com\/security-policy\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.decisionfish.com\/"},{"@type":"ListItem","position":2,"name":"Security Policy"}]},{"@type":"WebSite","@id":"https:\/\/www.decisionfish.com\/#website","url":"https:\/\/www.decisionfish.com\/","name":"Decision Fish: Decide For Yourself","description":"Decision Fish: Decide For Yourself","publisher":{"@id":"https:\/\/www.decisionfish.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.decisionfish.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.decisionfish.com\/#organization","name":"Decision Fish LLC","url":"https:\/\/www.decisionfish.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.decisionfish.com\/#\/schema\/logo\/image\/","url":"https:\/\/i0.wp.com\/www.decisionfish.com\/wp-content\/uploads\/2016\/02\/logo-final-vrcopy-page-large-e1455550951300.jpg?fit=1493%2C939","contentUrl":"https:\/\/i0.wp.com\/www.decisionfish.com\/wp-content\/uploads\/2016\/02\/logo-final-vrcopy-page-large-e1455550951300.jpg?fit=1493%2C939","width":1493,"height":939,"caption":"Decision Fish LLC"},"image":{"@id":"https:\/\/www.decisionfish.com\/#\/schema\/logo\/image\/"},"sameAs":["http:\/\/facebook.com\/decisionfish","https:\/\/twitter.com\/decisionfish","https:\/\/www.linkedin.com\/company\/decision-fish-llc\/"]}]}},"jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/P6OLLM-N5","_links":{"self":[{"href":"https:\/\/www.decisionfish.com\/wp-json\/wp\/v2\/pages\/3043"}],"collection":[{"href":"https:\/\/www.decisionfish.com\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.decisionfish.com\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.decisionfish.com\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.decisionfish.com\/wp-json\/wp\/v2\/comments?post=3043"}],"version-history":[{"count":7,"href":"https:\/\/www.decisionfish.com\/wp-json\/wp\/v2\/pages\/3043\/revisions"}],"predecessor-version":[{"id":12632,"href":"https:\/\/www.decisionfish.com\/wp-json\/wp\/v2\/pages\/3043\/revisions\/12632"}],"wp:attachment":[{"href":"https:\/\/www.decisionfish.com\/wp-json\/wp\/v2\/media?parent=3043"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}