Security and compliance
hoovie was born with security as an architecture requirement. Your data, and your travelers’ data, protected at every step.
01
We use only the data needed for the trip to happen, in compliance with Brazil’s LGPD.
Data protection officer channel: dpo@hoovie.com.br
02
In transit and at rest, your information is protected by encryption.
TLS on every connection, HSTS enabled and encryption at rest
03
Travelers, approvers, managers and agencies have their own permissions, checked on every action.
Role-based access control, token authentication and protected sessions
04
Who did what, when and what changed. A complete, read-only, exportable audit trail.
hoovie runs on Microsoft Azure, which holds the leading international security and privacy certifications, such as ISO/IEC 27001, 27017, 27018, 27701 and SOC 2 reports.
The certifications belong to Microsoft and cover the infrastructure; application controls are Argo’s responsibility.
Modern, isolated infrastructure, monitored around the clock.
An application firewall blocks known attacks before they reach the platform.
WAF with OWASP Core Rule Set in prevention mode
Services and databases run on a private network, reachable only through authorized channels.
System keys and passwords live in dedicated digital vaults, never in the code.
Continuous monitoring, with alerts and tracing of every operation.
Hosted in Azure data centers in Brazil.
Authorized people and systems
Application firewall
Private network
Services
Databases
Key and secret vault
IT and security teams receive the technical information during each client’s evaluation. Talk to our sales team or write to seguranca@hoovie.com.br.
