Security & Privacy

Written by Jarad on March 20, 2023

Ethics

FastBound is not a Federal Firearms License holder, and we never will be!

By using FastBound, you are not voluntarily giving your competitor confidential information including suppliers, customers, inventory, sales figures, or cost of goods sold.

Encryption

FastBound encrypts data in transit between your web browser and our servers, and again when it is stored on our servers:

  • Stored data is encrypted using 256-bit Advanced Encryption Standard (AES) encryption. 

  • Data transferred between your web browser and our servers is protected using only Transport Layer Security (TLS), creating a secure tunnel protected by 128-bit or higher Advanced Encryption Standard (AES) encryption. 

FastBound flags authentication cookies as secure, HTTP-only, and we assert HTTP Strict Transport Security (HSTS) which protects you from protocol downgrade attacks and cookie or session hijacking.

FastBound maintains an overall rating of A for the security certificate and configuration on our servers.

Backups

Exceeding ATF daily backup requirements, FastBound backs up databases every 5-10 minutes. Database backups are encrypted using 256-bit Advanced Encryption Standard (AES) encryption.

Assurance

FastBound is 100% designed, developed, supported, and hosted in the United States. Our software runs on Microsoft Azure, which has more certifications than any other cloud service provider.

  • Microsoft Azure has Department of Defense (DoD) Provisional Authorizations at Impact Levels 5, 4, and 2.

  • Microsoft Azure certifies the use of cryptographic modules, compliant with the US Federal Info Processing Standard (FIPS) 140-2.

  • Microsoft Azure maintains DoD certifications that meet and exceed US NIST 800-171 security requirements.

  • Microsoft Azure is compliant with Payment Card Industry Data Security Standards Level 1.

  • Microsoft Azure is DFARS compliant

FastBound is the leading choice among Department of Defense (DoD) contractors.

Policy

FastBound voluntarily aligns its policies and procedures with the ISO/IEC 27000 family of standards with no regulatory requirement to do so.

FastBound will never release any information about users or accounts unless legally compelled to do so. FastBound will never surrender any information without a court order, and only then, will we disclose the information specifically requested.

ATF can examine FFL records at the licensed premises at any time as part of any criminal investigation or to trace a firearm — in other words, it is easier for ATF to get information from you, the FFL, than it is from FastBound!