Snapshot 18600
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Sitetracker, Inc. is continuously monitoring its overall security posture. Announcements Sitetracker's updated CSA CAIQv4.0 Available Now! Published on Jun 15, 2023 Sitetracker has completed the Cloud Security Alliance CAIQv4.0 security self-assessment and is happy to announce it is available in our Trust Center under "Security" Compliance Documentation of our compliance against global standards including certifications, attestations, and audit reports. Security Documents Policies Continuous monitoring Note: If a control is passing all tests, it will be marked as green. If a control has a failed test that was not resolved within the past 3 days, it will be marked yellow. App Security Least-Privileged Policy for Sensitive Data Access System Access Control Policy Data Security Backup Policy Customer Data Policies Encryption Policy SSL/TLS Enforced Infrastructure Security Cloud Infrastructure Linked to Drata Physical Security Network Security Password Manager Password Policy Organization Security Clean Desk Policy in Place Disaster Recovery Plan Disposal of Sensitive Data on Paper Encryption at Rest Product Security Encryption of Web-Based Admin Access Software Development Lifecycle Subprocessors Sitetracker's list of subprocessors Subprocessors URL Salesforce, Inc. Cloud Service Provider Data location: United States, EU, EEA Twilio, Inc. Cloud-Based Email Delivery and SMS Notification Service Data location: United States Google LLC Cloud Service Provider Data location: United States PagerDuty, Inc Email and Document storage Data location: United States ProductBoard, Inc. Customer Feedback Repository Data location: United States Thought Industries, Inc. Customer Certifications, Training, and Help Documentation Data location: United States Topics and common questions 7 Sitetracker maintains a list of its authorized subprocessors at https://www.sitetracker.com/subprocessors/ and they can be viewed on our Trust Center. Sitetracker encrypts all sensitive data in transit using AES-128bit at minimum with common secure ciphers and encrypts data at rest using AES-128bit. The option to increase in transit and at rest encryption to AES-256 bit is available. Sitetracker is a multi-tenant SaaS provider that gives each customer a unique ID, and role-based access control for data segregation. Sitetracker uses an MDM solution to enforce antivirus, local firewall, disk encryption, auto-updates, and screen timeout, and to remotely lock and wipe devices that are lost or stolen. Sitetracker is a SaaS-based company and our cloud service provider, Salesforce, is responsible for implementing and maintaining controls related to physical data center security. Please rely on reports, certifications, and attestations from Salesforce when assessing physical security controls. Privacy details Sitetracker's Privacy Policy Privacy URL