How we protect your credentials

How we import your data

In order to automate the import of your utility data we securely save your login information and access your utility account to download your usage right from the source. Once we have access to that we can begin to automate the import of your utility data. In order to protect you and your team we have a two pronged approach to security: Policy and use of the secure data management system 1Password. 

Our Policy

Only authorized Carbonhound employees under NDA are authorized to access clients’ utility provider credentials and their accounts, and they are barred from taking actions outside of those required to successfully secure the import and upload of your utility data. We keep the original utility bills in a private Google Cloud Storage bucket for your convenience for verification purposes. You may request the total removal of your credential and utility data at any time - but note that once it is deleted we cannot restore lost data.

1Password

We never store your credentials on our own system - through a secure connection between our platform and our hosted 1Password Connect server, we store your sensitive data with the best security today’s market can offer. We also strictly limit who has access to the vaults containing your utility provider credentials, the actions that can be taken on your data, and regularly audit access.

Some highlights:

- End to End Encryption

- 256-bit AES encryption

- Phishing protection

Documentation

1password's Connect Server Service (Used to move passwords into the platform): Learn more

1Password's security model documentation: Learn more

Additional Security Measures

If applicable, we recommend creating an account for your utility provider specifically for Carbonhound Connect that has limited permissions.