I would like to know the level of security protocols involved with our data on the databases. Are these databases encrypted? Are there any particular certifications applicable to the security of data stored in these databases?
My understanding is that Wix claims a number of certifications, but details are scares to unavailable when it comes to me assuring that those security certifications extend to my client’s user data entered into their databases on their site. At least the language used on the certifications page does not specify this nor covers it. It is just vague and I have a feeling intentionally left so by legal. Which is fine, it just creates this surgical question in my use case for this exact need.
It would be great to hear in writing from Wix that these databases are encrypted and fully or partially covered by (which) certifications that Wix has earned from industry watchdogs and regulators.
Wix is doing all the efforts to be aligned with all the security requirements.
We’re currently working with a team of experts in order to make the required adjustments to our products, services, and documentation to ensure compliance with the GDPR.
Our platform will be compliant with the new GDPR regulation by May 2018 and will be able to provide you the relevant tools to ensure your responsibilities as a Controller of your users’ data.
In addition, please note that Wix.com is certified under the EU-US Privacy Shield Framework and the Swiss-US privacy shield framework as set forth by the U.S. Department of Commerce, regarding the collection, use, and retention of personal information transferred from the European Union to the United States, and therefore adheres to the Privacy Shield Principles.
Having said that, note that Wix does not validate the security of the data you store .
This means for example, that if you are not allowed to store plain passwords or credit card information, you should take care of it yourself before inserting into a database.
