Our product’s security is one of the most important factors that would decide its reliability. Without a solid set of product security features, even the best software could be an easy target to malware and hacking.
In order to ensure the end user’s privacy and that data are protected, we have included a few platforms’ security features. Our platform security framework is upon a superset of applications and operational level security features.
Secure steps are taken on how your data is collected, maintained, stored, and used. This security feature is applicable to all services and products offered by the platform, enhancing the security of all your data.
Overview
We understand that the security of the platform is extremely important for your business plans. So, all the services are secured over network communications using HTTPS and data encryptions.
The software and security will be designed in a way to be one of the most secure and trustworthy SAAS facilities available today.
Application-level security features
To build a secure system experience for you, we will add many application-level security features. Let’s see them in detail.
The following security level features will benefit all your users.
SSL Certified Application
As our platform is SSL certified, every data is encrypted prior to transmission. Data decryption can be done only by your server thus preventing eavesdropping and ensuring our customers that data is always secured in safe hands.
Secure Network Access
Any type of communication via your network is secured with HTTP access (HTTPS) so that users do not have to bother about any security issues.
Activity Stream
Any type of user activity is logged in the Platform activity stream, which can be filtered and searched against.
Authorized Access
Authorized access is permitted for Platform, thus restricting unauthorized users from accessing the Platform.
.
Access Rights Management
Access to data in your account is on a per user/per product basis, by restricting account administrators from accessing the data.
Layered security
In addition to access control, we have also checks at api level where only authorised role can access or execute api.
User Tokenization
We replace sensitive data with unique identification symbols that retain all the essential information about the data without compromising its security on user data, as this is SaaS and information goes back and forth over the Internet.
AWS Firewall System
AWS Firewall manager is to centrally configure and manage firewall rules across accounts and applications.
Encryption of data at rest
In our platform, all encryption of data is done using 256-bit AES encryption.
Third Party Access
Strict security measures are used against third parties from accessing the data. The database can only be accessed by a private network of application.
Operational Security
Operational security is a risk management process executed to protect sensitive data from suspicious hands.
System and Operational Security
Unauthorized system access is blocked using high-end firewalls and network services.
Software Security
Our platform is carefully crafted with security measures in a way to separate customer data and also restrict inadvertent disclosure of data from one another. SQL injection and cross-site- scripting are not possible under any circumstances.
Network Security
Any form of communication is encrypted using TLS. Login and post-login web pages are served over HTTPS.
We use a tool called Sonar Qube to ensure code quality and security.
Amazon Web Services
Apart From all these, our product is enhanced with Amazon Relational Database Services (Amazon RDS). Using this, it is easier for you to migrate or replicate from your existing database to Amazon RDS.
It will be available on various database instances types– optimized for performance or I/O, memory and provides users with several database engines including Amazon Aurora, Microsoft SQL, Oracle, PostgreSQL, My SQL and MariaDB.
Why did we choose AWS as our hosting platform?
The specific reasons behind the AWS platform are:
- Highly scalable
- Easy to administer
- Available and durable
- Fast and secure
- Data backup and recovery
- Failure detection
- Patching and provisioning