...
Expand | ||
---|---|---|
| ||
Has your organisation implemented segmentation or segregation in your networks and/or cloud environments? Yes. XXXXX We implement segregation on the user role level, preventing users from accessing features and pages that are out of their provisioned access. We implement segregation between customer accounts. The product is one system shared between customers with security policies in place to only enable access to customer relevant data. Data is segregated from other customers through the use of dedicated subdomains, user credentials authentication, and organisational identifiers within the product. |
Expand | ||
---|---|---|
| ||
Does your organisation secure and encrypt all data transfers using an appropriate control/protocol (for example, SFTP, HTTPS), and are all data transfers subject to review and authorisation? Yes. All connections to the platform are via HTTPS with data transfers using secure FTP services. |
...