Stronger logins, stronger systems

Behind every satellite image and streamflow forecast, there’s a strong foundation of security supporting the decisions you make. At Upstream Tech, we know that trust is earned and we’ve built our systems to reflect that, from how we handle your data to how we respond to risk.

From your flow forecasts, stream observations, and model configurations in HydroForecast, to your properties, imagery, and notes in Lens, your information is always kept secure and never shared. We treat your data with the protection and respect it deserves.

Security might not be the flashiest feature, but it’s one of the most important. And while you may not see it day to day, there’s a whole lot of infrastructure quietly keeping your data safe—and we’re always working to make it stronger.

How we keep your account secure

We’ve built multiple layers of protection into our products to help keep your accounts secure. These include industry-standard practices like multi-factor authentication (MFA), which requires a code from your mobile device via text message or an authenticator app in addition to your regular password. MFA significantly reduces the risk of unauthorized access and is a core part of our security strategy.

We also take other proactive measures to safeguard your data, including: 

• Catching issues early. Every change is reviewed by another engineer and goes through automated tests and thorough QA to catch problems before they reach production. Our systems continuously run checks to make sure things are working as expected, and automatically alert our engineers to correct issues.
• Encrypting everything. Your data is encrypted both in transit and at rest, protecting it every step of the way.
• Keeping systems up to date. We regularly patch known security vulnerabilities and keep our libraries and dependencies fresh.
• Learning and improving. After any incident, we conduct a full retrospective to identify long-term improvements.

Upstream Tech is run on Google Cloud Platform, which is independently audited and certified, and we follow best practices like immutable infrastructure and strict access controls.

👉 Learn more on our Security page.

Proactive responses and continuous improvement

While incidents are rare, our team is prepared. If anything happens involving your data or account, you can expect us to respond quickly, communicate clearly, and use it as an opportunity to strengthen our systems even further.

Security is core to how we operate and we’re always looking for ways to improve. If you have any questions or ideas around security, don’t hesitate to reach out to our team.

‍