Time to innovate

One of the fruits of being self-funded is the time for extreme innovation. Over the years, we've developed extensive proprietary technology to support the complex needs of our clients. In fact, all of our products today are built on a unique isomorphic paradigm in which much of an application's logic can be run directly in the web browser, enabling even the most computationally intense operations to be performed at blazing fast speeds.

Secure software icon

Security

Rotunda Software takes every measure to ensure that your data remains completely secure, both when it is stored on Rotunda's cloud servers and when that data is in transmission to and from those servers.

Cloud Server Security

Rotunda's web servers are housed in the secure data centers of Amazon Web Services (AWS). AWS has achieved ISO 27001 certification and has successfully completed multiple SAS70 Type II security audits. The U.S. government has awarded AWS an approval to operate at the FISMA-Low level, which means that government agencies operating on AWS infrastructure can achieve compliance with the Federal Information Security Management Act (FISMA). Additionally, AWS customers have built healthcare applications compliant with HIPAA's Security and Privacy Rules on AWS. Detailed information on AWS's security and compliance is available directly from Amazon.

Data in Transmission

All communication between client software and Rotunda's cloud servers is encrypted with the government approved AES-128 bit algorithm. This encryption technology is the same that is used to encrypt your financial information when you access your bank account online. Also, when volunteers access their schedules, the connection between their web browser and the Rotunda server is SSL enabled, which is the industry standard technology used to encrypt sensitive data.

PCI Compliance & Credit Card Info

Rotunda is certified as compliant with the Payment Card Industry Data Security Standard, a set of requirements designed to ensure that companies that process credit card information maintain a secure environment. All software payments are processed through the industry standard authorize.net. We do not store credit card numbers or security codes in our infrastructure. Instead, we leverage authorize.net's Customer Information Manager service to store credit card on authorize.net's ultra secure servers. As a result, there is no possibility that credit card information is compromised in the very unlikely event of a security breach of our database.

Security Audit

Redspin, Inc., a leading provider of penetration testing services and IT security audits, completed their most recent security audit of Rotunda Software, LLC in May 2019. After a thorough audit of our external network, application services, and validation services, Redspin, Inc. concluded: "Our assessments provide a reasonable basis for determining overall security risk. Rotunda Software, LLC employs an above-average level of security controls on their application, and the overall security posture of Rotunda Software appears to be well above industry average."

  • AES 256 logo
  • Authorize.net logo
  • Redspin logo
  • Amazon Web Services logo
  • Two Rotunda employees talking
  • Rotunda employees concetrated at work
  • Rotunda employees programming

Interested in working with us?

If you're passionate about doing your best work, you could be an important part of what comes next.

View open positions