Security

Last update: August 2026.  Applies to all 360 Technologies USA LLC platforms and services

Your data is our priority.

360 Technologies USA LLC implements advanced security controls comparable to those used by leading e-commerce platforms, financial institutions, and regulated service providers. Our products (Live 360, ClickSign 360, Flash Team 360, Hi360x) are built on an architecture designed to protect the confidentiality, integrity, and availability of your information.

NEW (August 2026): With the launch of 360x AI, we have implemented additional security measures and documented our complete data protection architecture in our new “Data Protection & Security Addendum.”

360 Technologies USA LLC implements advanced security controls comparable to those used by leading e‑commerce platforms, financial institutions, and regulated service providers. Our products (Live 360, ClickSign 360, Flash Team 360, Hi360x) are built on an architecture designed to protect the confidentiality, integrity, and availability of your information.

 Encryption and Data Protection

      • SSL/TLS encryption for all data transmitted between your device and our servers.

      • AES‑256 encryption for data stored in the cloud.

      • Secure authentication with strong passwords and two‑factor authentication (2FA) via SMS or compatible apps.

      • Industry‑standard key management to ensure encrypted data remains inaccessible without proper authorization.

    Cloud encryption ensures that your information is unreadable without the correct keys—even if data is lost, stolen, or accessed improperly. These measures support compliance with modern data privacy and protection standards.

    🟢 360x AI SECURITY (NEW – August 2026)

    What is 360x AI?

    360x AI is an intelligent assistant integrated directly into Live 360, available in two pricing tiers (Free and Pro). It processes insurance policy data to provide analysis, communications, and insights.

    360x AI Data Protection

    CRITICAL: 360x AI implements enterprise-grade security measures:

    • Encryption: All 360x AI queries and responses are encrypted in transit (TLS 1.2+) and stored data is encrypted at rest (AES-256)
    • Access Control: Role-based access control (RBAC) ensures only authorized users can access their data
    • Audit Trail: Every 360x AI interaction is logged for compliance and auditing purposes (6-year retention)
    • Data Isolation: Each customer’s data is logically isolated with no cross-tenant data sharing
    • Retention & Deletion: 360x AI conversation history is stored in your Live 360 account and can be deleted anytime
    • AI Model Security: Your data is never used for model training; processing occurs in real-time, in-memory
    • No External Sharing: Your data is never transmitted to external AI providers
    • Breach Notification: We will notify you within 24-72 hours of any confirmed breach involving 360x AI data

    360x AI Compliance

    360x AI is designed to meet or exceed:

    • HIPAA security standards (though customers determine HIPAA applicability)
    • GDPR data protection requirements
    • CCPA/CPRA compliance obligations
    • SOC 2 Type II standards (in progress)

    For detailed technical specifications: See our “Data Protection & Security Addendum” (available upon request under NDA).

    🔵 HI360X AI SECURITY

    Hi360x data is protected with the same enterprise-grade security as our other services:

    • Encryption: All Hi360x data is encrypted in transit (TLS 1.2+) and at rest (AES-256)
    • Access Control: Role-based access control (RBAC) with audit logging for all AI interactions
    • Data Isolation: Hi360x customer data is logically isolated per tenant
    • Retention & Deletion: Automated deletion of Hi360x data after 12 months or upon customer request
    • AI Model Training: Hi360x data may be used for model training unless you opt out (see Privacy Policy)
    • Audit Trail: Comprehensive logging of all Hi360x access and interactions
    • Breach Notification: We will notify you within 72 hours of any confirmed breach involving Hi360x data
    • Regular Audits: Our AI systems undergo quarterly security reviews and penetration testing

    🌐 API AND INTEGRATION SECURITY (MCP)

    For customers using our MCP integration to connect with third-party AI assistants:

    • API Key Management: All API keys are generated securely and must be stored confidentially by you. We recommend rotating keys regularly (every 90 days).
    • Encryption in Transit: All data transmitted via MCP is encrypted using TLS 1.2 or higher
    • Access Controls: We enforce strict rate limits and monitor for suspicious activity to prevent abuse
    • Audit Logging: All actions performed through the MCP integration are logged and available for review
    • Rate Limiting: Automatic throttling prevents abuse (60 req/min per user, 1000 req/hour)
    • Authentication: AWS SigV4 signing for API requests ensures integrity and authenticity

    Your Responsibility: You are responsible for:

    • Securing your API keys and credentials
    • Ensuring only authorized users have access to the integration
    • Monitoring for suspicious activity
    • Complying with third-party terms when transmitting data

    Hi360x data is protected with the same enterprise-grade security as our other services:

    – Encryption: All Hi360x data is encrypted in transit (TLS 1.2+) and at rest (AES-256)
    – Access Control: Role-based access control (RBAC) with audit logging for all AI interactions
    – Data Isolation: Hi360x customer data is logically isolated per tenant
    – Retention & Deletion: Automated deletion of Hi360x data after 12 months or upon customer request
    – AI Model Security: Models are trained in isolated environments; no customer data is shared between tenants
    – Breach Notification: We will notify you within 72 hours of any confirmed breach involving Hi360x data
    – Regular Audits: Our AI systems undergo quarterly security reviews and penetration testing

    API and Integration Security (MCP)

    For customers using our MCP integration to connect with third-party AI assistants, we implement additional security measures:

    • API Key Management: All API keys are generated securely and must be stored confidentially. We recommend rotating keys regularly.
    • Encryption in Transit: All data transmitted via MCP is encrypted using TLS 1.2 or higher.
    • Access Controls: We enforce strict rate limits and monitor for suspicious activity to prevent abuse.
    • Audit Logging: All actions performed through the MCP integration are logged and available for review.

    You are responsible for securing your API keys and ensuring that only authorized users have access to the integration.

     ☁️ Secure Cloud Infrastructure

    We partner with top‑tier cloud providers that maintain internationally recognized security certifications, including:

        • SOC 1, SOC 2, SOC 3

        • ISO 27001

        • HIPAA/HITECH

        • PCI DSS (when applicable)

      Our infrastructure includes:

          • Network segmentation

          • Managed firewalls

          • Intrusion detection and prevention systems (IDS/IPS)

          • Role‑based access controls (RBAC)

          • Continuous auditing and activity logging

        🔄 Backup and Reliability

        To ensure service continuity and data durability:

            • Multiple backups are performed throughout the day.

            • Data is replicated across redundant geographic zones.

            • Disaster Recovery (DRP) and Business Continuity (BCP) plans are in place.

            • Systems operate with fault tolerance and load balancing.

          This guarantees that your information remains available even during unexpected events or hardware failures.

          🔏 Privacy and Data Ownership

          Your information belongs exclusively to you. 360 Technologies USA LLC does not sell, rent, or trade user data under any circumstances.

          We apply strict controls to protect data confidentiality and integrity, including:

              • Automated integrity checks

              • Internal quality assurance processes

              • Role‑restricted access

              • Monitoring for suspicious or unauthorized activity

            Users may request data exports in Excel/CSV formats at any time by contacting: 📩 info@360techusa.com

            🛡️ 24/7 Monitoring and Supervision

            Our systems are monitored in real time 24x7x365. Monitoring includes:

                • Network and server health

                • Application performance

                • Security anomalies

                • Unauthorized access attempts

                • Unusual behavior that may affect user experience

              Any incident is addressed immediately by our security and operations teams.

              ⚠️ Incident Response and Breach Notification

              Although we employ advanced security measures, no internet‑connected system can be guaranteed completely secure.

              In the unlikely event of a data breach:

                  1. Our Incident Response Protocol will be activated.

                  1. Affected users will be notified promptly.

                  1. Mitigation and corrective actions will be implemented.

                  1. The event will be documented according to applicable compliance standards.