Information Security Policy

MojoAuth was established in 2021, born from the passwordless movement with a singular mission: to free companies from the burden of passwords. What began as a developer-first initiative quickly gained momentum, and by 2023-2024, MojoAuth evolved from a passionate developer community into a full-fledged passwordless authentication platform. Today, MojoAuth provides passwordless authentication for consumer apps that helps companies implement and securely manage customer authentication across web, mobile, and other digital applications - delivering a seamless, passwordless experience at enterprise scale.

Partnered with Amazon, MojoAuth services run on Amazon Web Services (AWS) cloud hosting through Cloudflare DNS (Domain Name System) service. MojoAuth information security team performs frequent security assessments to deliver the highest level of security to its customers. This Information Security Policy Statement aims to ensure that MojoAuth, Inc. (MojoAuth) delivers a high standard of information security through its platform for its customers.

MojoAuth hosts its software infrastructure application on Private Cloud Single Tenant, so customers can meet their own compliance requirements including HIPAA, SOC2 Type II, PCI DSS on the AWS cloud platforms. MojoAuth is ISO 27001 and SOC 2 Type II certified, aligns its security practices with NIST CSF, and is committed to continually improve its information security and best practices.

The risk management processes in place allow the business to ensure that risk mitigation efforts are applied properly and effectively. This will ensure that MojoAuth is well known as a reputable company and meets its customers' requirements and legal/regulatory obligations.

MojoAuth commits to:

• Achieving the expectations of its customers and relevant regulatory authorities.
• Understanding customers needs to deliver high standard services.
• Making sure all of its employees follow the company's best practices, processes and procedures.
• Protecting customer data and MojoAuth' information, intellectual property, people and activities against loss, damage, disruption, or unauthorized disclosure.
• Implementing and maintaining security policies and procedures to meet the ISO 27001, NIST CSF requirements and any other compliance processes that MojoAuth follows.
• Implementing an Information Security Management System and ensuring that it is continually improved and supported with the necessary resources required to achieve the commitments written in this policy statement.

MojoAuth will achieve its objectives by investing time and resources in its platform technology, staff skills, processes, and policies. These efforts will maintain the high standard of MojoAuth services offered to its clients and keep up with new technologies and customer requirements.