We’re excited to announce that we’ve partnered with our friends at Netlify to develop an add-on that effortlessly and securely collects data via webforms.
If you are not already familiar with Netlify, they offer developers a global application delivery network that eliminates the need to worry about infrastructure and hosting. Their platform is used by over 500,000 developers and is the foundation for more than 7.5 million websites.
You Can’t Hack What Isn’t There
The add-on focuses on the initial stage of the data lifecycle, i.e. the collection of data. With this simple add-on, you can build forms that ensure no sensitive data ever actually touches your servers. Instead, the data is transformed in real-time before it ever hits your system. VGS provides you an alias and secures the original data in our vault until needed. This drastically reduces your risk exposure and compliance responsibility. In the case of a data breach, your systems won’t be holding anything sensitive, so you are protected from liability.
When you need to use your data again, simply format your payload or API call as you would using the aliased data in place of the real thing. On the outbound route VGS again transforms the aliases back into original values with no code changes required of you or your recipient!
Collect & Protect Any Kind of Data
Some examples of what you can do with the VGS add-on include:
- Collect credit card data in a PCI-compliant manner
- Protect personally identifiable information (PII) like SSNs, IDs, etc.
- Collect & store banking, billing or healthcare information securely
- Redact function logs
- Fast-track PCI, SOC2 and other compliance certifications
Instant PCI compliance with VGS & Netlify
Using the VGS Add-On for Netlify to collect and process payments information allows you to instantly inherit Very Good Security’s security posture and PCI compliance. By not handling sensitive data yourself, your systems remain out of compliance scope, and you get the benefit of VGS’ existing certifications. And if you need documentation to demonstrate compliance, VGS can help you provide that, too.
Check out this quick demo video to see the VGS add-on in action:
How does it work?
With the VGS add-on, form data is redacted and aliased in real-time, keeping your systems completely out of compliance scope.
What does this mean?
You shift data liability to VGS, and you're able to rapidly achieve compliances like PCI, SOC2 and more, because the sensitive data never touches your backend, nor is it exposed in the Netlify UI.
How can you securely send the data to third parties?
For revealing and sending your data to third parties, you need to configure your outbound connection in the VGS Dashboard or use one of the pre-defined VGS third party integrations.
How to add VGS to Netlify
If you don't have a Netlify instance yet, you'll need to create and deploy a site it to Netlify. You can get a free account at Netlify then follow these steps:
- Install netlify-cli
npm install netlify-cli -g - Run
netlify addons:create vgsfrom your website's directory or use our example and follow the README instructions - Run
netlify addons:auth vgs, to authenticate to Very Good Security. You'll be prompted to create an account with VGS if don't have one yet. Then you can grant the add-on access to your VGS account. - From there, follow the interactive guide to configure details
Demo Video: Configure & Deploy VGS for Netlify
Here's a video walk-through from our friends at Netlify showing a full demo install and deployment of the VGS add-on for a Netlify site:
Additional Resources
Here are some additional resources to help you get set up:
- Netlify's "Getting Started" docs
- VGS docs on Netlify add-on integration
- VGS Netlify Add-On Demo repo
- VGS Netlify Add-On Example repo
Final Thoughts
We're excited to help Netlify users take their data collection and security posture to the next level. With this add-on you can quickly and easily achieve compliances such as PCI and SOC2. That means you'll have more time to focus on building your business and can spend less time dealing with security and compliance headaches.
Stay secure, my friends!
