Your data security is our top priority
We build and operate the Logiclots platform with security at every layer — from infrastructure and encryption to access controls and incident response.
Security Practices
Data Encryption
All data transmitted to and from our services is encrypted using TLS 1.3 (HTTPS enforced on all endpoints). Sensitive customer data stored within the Logiclots SaaS platform is encrypted at rest. Payment information is handled exclusively by Stripe and never stored on our servers.
Infrastructure
The site runs on AWS ECS (Fargate) behind an Application Load Balancer in US East, with Route 53 handling DNS. HTTPS is terminated at the ALB using an ACM-issued certificate.
Access Controls
We enforce role-based access control (RBAC) within our platform. We are implementing MFA requirements for all internal access to production systems as part of our SOC 2 compliance process, and follow the principle of least privilege. Access logs are maintained and reviewed regularly.
Monitoring and Logging
We implement application logging for error tracking and system access monitoring. Logging capabilities are being enhanced as part of our SOC 2 preparation roadmap. Automated monitoring detects anomalous behavior and potential security incidents. Critical alerts trigger immediate investigation by our engineering team.
Application Security
Our development workflow includes peer code review with security considerations, dependency vulnerability scanning via automated tools, and adherence to OWASP Top 10 secure coding guidelines. We use parameterized queries, input validation, content security policies, and strict CORS configuration.
Compliance Roadmap
We are actively pursuing SOC 2 Type II certification. Payment data is processed exclusively by Stripe, a PCI DSS Level 1 certified payment processor. NGPS never stores, processes, or transmits raw cardholder data. We satisfy our merchant-side PCI obligations through Stripe's SAQ-A eligible integration. We support GDPR and CCPA compliance requirements as detailed in our Privacy Policy.
Incident Response
We maintain a documented incident response plan that covers detection, containment, investigation, remediation, and post-incident review. In the event of a security incident affecting customer data:
- EU/UK customers subject to GDPR will be notified within 72 hours of a confirmed breach involving personal data of EU/UK residents. For other customers, we will provide notification as promptly as reasonably practicable and in accordance with applicable state breach notification laws.
- A post-incident report will be provided detailing the scope, root cause, and remediation steps taken.
- Preventive measures will be implemented to avoid recurrence.
Responsible Disclosure
We value the work of security researchers. If you discover a vulnerability in our systems, we encourage you to report it responsibly. Please email ops@ngparkingsolutions.com with details, or call us at +1 (404) 729-1499. We ask that you:
- Provide sufficient detail for us to reproduce and validate the issue.
- Allow reasonable time for us to investigate and address the vulnerability before public disclosure.
- Avoid accessing or modifying data belonging to other users.
We will acknowledge receipt within 48 hours and work with you to understand and resolve the issue. We ask that you allow us at least 90 days from the date of initial report to investigate and remediate the vulnerability before public disclosure.
Out of scope: attacks requiring physical access, social engineering of NGPS employees, issues in third-party services (Stripe, AWS, Cloudflare), and denial-of-service attacks.
We do not currently offer a paid bug bounty program but genuinely appreciate responsible disclosures. Researchers who report valid, previously unknown vulnerabilities will be acknowledged in our security hall of fame (with their permission).
Security practices described on this page reflect our current implementation and intended posture as of the date shown. Some capabilities are being actively implemented as part of our SOC 2 preparation roadmap.
Last updated: March 21, 2026. For our complete legal terms, see our Terms of Service and Privacy Policy.