Below is a summary of the measures we’ve taken to protect data in the BEE:

• Use of the BEE is governed by the Terms of Service
• The BEE application is hosted using Amazon Web Services, and measurement data is encrypted at rest within AWS S3.
• User credentials (passwords) are stored and handled entirely by a third party service, Auth0
  • Read more about Auth0’s data security measurements here: https://auth0.com/security
• Database has no open connection to the public internet and can only be accessed within the VPC
• The Change Climate Project follows principals of least privilege when granting data access to employees and contractors
• The Change Climate Project volunteers and contractors have agreements in place to never share data.

The Change Climate Project’s complete privacy policy can be found at: https://www.changeclimate.org/privacy-policy