Your Shake data,
safe and sound.

We take it seriously. These are measures and policies we stick to in order to keep your data private.

Yes, your data. Unlike others, we don’t claim ownership over it. We host it to provide you our service on top of it, just like a bank provides and protects your safe deposit box without owning its contents.

AWS infrastructure

Shake is 100% hosted on Amazon Web Services, a world leader in compliance with the latest security best practices, including Privacy Shield. All your data is in Amazon’s private data center in Frankfurt, Germany, European Union eu-central-1.

Data is encrypted

Your data in transit is encrypted using secure TLS cryptographic protocols. It’s then stored in PostgreSQL and ElasticSearch on AWS Elastic Block Store disks, both of which are encrypted at rest using AES with a 256-bit key.

No access

Even the basic data our systems are required to have can not be accessed unless formally requested by you. Then, only one of the authorized in-house employees — audited on a regular basis — could be granted an access to assist you.

Disable at the source

Shake reports non-personally identifiable info but you can customize it to report truly anything, for example during internal testing. You can use the .setNetworkRequestsFilter() to redact private info on devices so it never leaves the source.

Shake enables you to hide personally identifiable information

No credit card data

The best way we can protect your credit card info is to not get it at all. If you decide to upgrade, you will do so through a secure payment processor Stripe.

Data Processing Agreement (DPA)

Shake implements comprehensive DPA in compliance with GDPR. These agreements outline our commitment to protecting personal data, detailing processing responsibilities, and more.

Data certification

ISO 27001, ISO 27017 and ISO 27018

Shake data centers are compliant with ISO 27001, ISO 27017 and ISO 27018 certifications. These widely-recognized international security standards cover the systems, applications, people, technology, policies, procedures and data centers serving customers. Our hosting provider Amazon Web Services (AWS) has achieved all three of these certificates. AWS’s ISO 27001 defines how AWS perpetually manages security in a holistic, comprehensive manner. The ISO 27017 certification provides guidance on the information security aspects of cloud computing. ISO 27018 governs protection of personally identifiable information (PII) in the cloud.

SSAE 16 / ISAE 3402 Type II: SOC 1, SOC 2 and SOC 3

Shake data centers are compliant with SOC 1, SOC 2 and SOC 3 certifications. The purpose of SOC standards is to provide confidence and peace of mind for organizations when they engage third-party vendors. A SOC-certified organization has been audited by an independent certified public accountant who determined the firm has the appropriate SOC safeguards and procedures in place. Our hosting provider Amazon Web Services (AWS) has achieved SOC 3 certification and its public report can be downloaded here.