📖 NEW: I AM THE FEATURE™ T.I.M.E. Business Blockbuster Workbook — $49.99 $14.84
Book NowTapn.vip by Glossy Byrd Management LLC serves professionals, banks, institutions and families. Here's exactly how we protect your data — and where we are on our SOC 2 journey.
SOC 2 Program Status
SOC 2 readiness in progress (Type I preparation; Type II evidence collection active)
Independent audit reports will be available under NDA upon completion. Enterprise prospects can request our security package at glossybyrd@glossybyrd.com.
Encryption everywhere
TLS 1.2+ with HSTS preload on every connection — legacy TLS rejected at the edge. Passwords hashed with bcrypt; sensitive vault documents encrypted at rest.
MFA & passkeys
Privileged accounts require authenticator-app MFA (NIST AAL2). Members can sign in with device passkeys (WebAuthn) — biometrics never leave your device.
Continuous monitoring
Automated Threat Watch, visitor threat classification, IP blocklisting and instant breach alerts on suspicious admin activity or repeated failed logins.
Audit logging
Every privileged action — role changes, plan changes, suspensions, credit grants — is written to an immutable audit trail.
Least-privilege access
Role-based access control across member, support, institution and admin roles. Access reviewed quarterly; departures revoked instantly.
Incident response
Documented response plan with one-tap containment (IP bans, account suspension) and post-incident review, exercised annually.
Identity verification
Automated government-ID + selfie verification through Stripe Identity powers the ✓ Verified member badge. ID documents never touch our servers.
Payment security
All payments processed by Stripe (PCI-DSS Level 1). Card data never touches Tapn.vip servers; all amounts computed server-side.
| Vendor | Purpose | Certifications |
|---|---|---|
| Stripe | Payments & identity verification | PCI-DSS Level 1, SOC 1/2 |
| Managed MongoDB hosting | Encrypted data storage & backups | SOC 2 |
| Resend | Transactional email | SOC 2 |
| Twilio | SMS emergency alerts (opt-in) | SOC 2, ISO 27001 |
Report a security concern
Found a vulnerability? Email glossybyrd@glossybyrd.com with details. We investigate every report and never take legal action against good-faith research. See also our Security & Compliance, Privacy Policy and Digital Identity Roadmap.
Add Tapn.vip to your home screen
One tap to your digital passport — no app store needed.