How WaterMark is secured · updated August 23, 2026

Security at WaterMark

WaterMark holds your customers' addresses, gate codes, and billing. We treat that as the job. Everything on this page is true today and tested in our own release gates; when something here changes, this page changes with it.

The database is not on the internet

Our production database accepts no connections from the public internet. Inbound rules block all external traffic; the application reaches it only over the hosting provider's private network. There is no password to guess because there is no door to knock on.

Encryption

Every connection to WaterMark uses TLS. Off-site backup snapshots are written daily to independent storage with AES-256 server-side encryption, and our test suite checks that the backup code matches this published claim.

Payments

Payments are processed by Stripe. Card numbers are entered on Stripe's hosted pages and never touch or rest on WaterMark's servers.

Your company's data is isolated

Every record is scoped to your company. Cross-company reads are blocked at the query layer, and our release gates include tests that fail if any endpoint leaks across that boundary.

Access controls

Owners control team roles and per-person office and field access. Office logins support two-factor authentication with recoverable backup codes.

Your data rights

You can export your data or request deletion at any time; deletions complete within a published 30-day window that we track on an operations dashboard. The full picture is in the Privacy Policy and the Data Processing Addendum, which also lists every subprocessor we use.

Copyright

WaterMark's DMCA designated agent is registered with the U.S. Copyright Office; the notice process is published in our Terms of Service.

What we do not claim

We do not currently hold a SOC 2 or ISO 27001 certification, and we will not imply otherwise. What we publish here is what we have built and what our own tests enforce.

Reporting a security concern

Found something? Tell us at support@watermarkapp.online and include steps to reproduce. We read every report.