Snapshot 120508
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Security and compliance at Make Join 350,000+ Make users around the world who trust Make to keep their data safe and secure. Enterprise-grade security GDPR SOC 2 Type II SOC 3 Get started free The world's leading companies run on Make Highly secure and reliable visual automation Get started free Application security Strict vulnerability management processes to identify and resolve threats. Regular penetration testing by independent third parties to ensure that our platform is safe and secure. Compliance We prioritize data security through rigorous compliance and independent verification. Along with GDPR adherence, we have completed SOC 2 Type II and SOC 3 audits. While the SOC 2 report details our internal controls, the SOC 3 report serves as a public summary intended for external audiences to verify our industry-standard security practices. Access control Robust access control measures. Our hosting environment is only accessible from the private network via VPN and does not support direct access from the public internet. Single sign-on (SSO) We support single sign-on authentication with Google, Facebook, and GitHub. Advanced role and team management functions within an organization's profile. Enterprise customers have the option to use their own SSO implementation. If you want to find out more: Talk to sales. Data center Our cluster is deployed over two zones to guarantee availability. Our infrastructure resides within Amazon AWS EC2 private instances (Amazon VPC) with Amazon Enterprise support in place. Learn more about AWS security here. Coding and development standards Our developers adhere to coding standards in accordance with the Open Web Application Security Project (OWASP). Static Application Security Testing (SAST) is also in place to improve Make’s Software Development Life Cycle (SDLC). Customer data security We are committed to protecting our customers' data and employ advanced security practices to keep data safe and secure. By default, log data is stored for 30 days. In our Enterprise Plan, we also offer the ability to store data for an extended period. If you want to find out more: Talk to sales. Data at rest All passwords are stored in an encrypted format and can’t be reproduced by anyone - not even Make employees. We use full-disk encryption within the industry-standard AES-256 encryption algorithm and AWS Key Management Service (KMS) for managing cryptographic keys. Data in transit Every connection between Make and a third-party service provider is established in the most secure available way. In some cases (e.g. FTP, databases), customers have the option to manually set the security level. We secure our network communication with TLS version 1.2 and 1.3 using AES 256 encryption. Make for enterprises Our Enterprise platform runs in a separately managed AWS environment, isolated from the self-service cloud customers. As an Enterprise Plan customer, you enjoy 99.5% Cloud Service Uptime and our Enterprise Customer Support Services with defined Customer Support Service SLAs. We operate under an information security program that is ISO 27001 certified and runs within an infrastructure compliant with SOC 3 and SOC 2 Type II. Talk to sales Get started free Industry best practices and standards We are committed to maintaining the highest security and compliance standards to keep your data secure and confidential. Learn about our approach to application security, access control, customer data security, and more. Connect 3,000+ native apps across your stack Reduce manual work by a factor of 5 50% fewer manual processes in under 6 months Critical process automation with 24/7 support Read our whitepaper