Infrastructure security
✓ Unique production database authentication enforced
✓ Encryption key access restricted
✓ Unique account authentication enforced
Controls
Organizational security
✓ Asset disposal procedures utilized
✓ Production inventory maintained
✓ Portable media encrypted
Product security
✓ Control self-assessments conducted
✓ Data transmission encrypted
✓ Vulnerability and system monitoring procedures established
Internal security procedures
✓ Continuity and Disaster Recovery plans established
✓ Continuity and Disaster Recovery plans tested
✓ Cybersecurity insurance maintained
Data and privacy
✓ Data retention procedures established
✓ Customer data deleted upon leaving
✓ Data classification policy established
Subprocessors
Amazon Web Services · Cloud provider
GitHub · Version control
Google Workspace · Identity provider
Microsoft Azure · Cloud provider