Data security
Every customer has an own environment. By using a 3 factor security (company-ID, username and password) a high security level is ensured. Additionally access can be restricted on IP address-level and/or using an unique session code per session can be setup.
Level 1
-
-
Data Center
- ISO 9001
- ISO 27001
-
Level 2
-
-
Secured connection
- HTTPs – SSL certificate
- Data will be encrypted between datacenter and user
-
Level 3
-
-
Monitoring
- DDoS protection
- Web Application Firewall
- Pen & hack tests
-
Level 4
-
-
Customer environment
- Every customer has an own environment
- Login: company-ID, user name and password
- Password only retrievable by user via email
-
Level 5
-
-
Additional access options
- Single Sign On (SSO) using your own username and password
- and/or only access using a 2-factor authentication
-
Level 6
-
-
Access per contract
- Per contract access can be setup
- No access means contract not visible
-
The certificates
Quality
ISO 9001 concerns the standard for quality management which is applicable for all processes from out hosting partner. An in dependable quality company performs an annual audit to check, validate and document all processes. The certificate proofs that an effective quality management systems is used and that the hosting partner operates according to the defined rules and procedures
Security
The ISO 27001 certificate proofs that procedures and daily activities within the data center are carried out by following strict procedures according to the norm. During annual audits the Information Security Management System (ISMS), and the processes behind the system, are checked and approved. The norm operates according requirements for defining, implementing, performing, checking, judging, managing and improving the documented ISMS related to operational risk management
Socially responsible entrepreneurship
ISO 14001 is a standard related to social responsibility. By using an environmental management system and the ISO standards environmental risks can be controlled and when applicable reduced. The certification is audited annually.