Snapshot 218610
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Start your security review Overview Welcome to the SequenceShift Trust Centre. This portal provides our customers, partners, and visitors with a transparent, high-level overview of our security posture, compliance certifications, and data protection practices. Who We Are and What We Do SequenceShift provides a secure Software as a Service (SaaS) Platform that captures cardholder information and submits it to payment providers for processing. We serve organisations requiring secure payment capture for Amazon Connect. To ensure maximum security, SequenceShift does not store cardholder data after a financial transaction is completed; we only store the transaction's outcome. Our Cloud Infrastructure The SequenceShift platform is hosted entirely within Amazon Web Services (AWS) cloud infrastructure across multiple AWS Regions, allowing information processing to occur in the specific region selected by the customer. SequenceShift does not operate any physical data centres. Our Trust and Compliance Posture We maintain a robust security program backed by senior management commitment, financial investment, and rigorous external validation. Our core trust posture is anchored by the following key pillars: Industry-Standard Certifications: SequenceShift is fully certified and compliant with ISO/IEC 27001:2022 and PCI DSS v4.0.1. Our ISO 27001 Information Security Management System (ISMS) covers our SaaS platform, web application, software development processes, and cloud infrastructure management. Data Privacy and Protection: Safeguarding customer privacy is central to our operations. We limit personal data to what is necessary, encrypt it at rest, and archive or remove it when no longer needed. Payment transactions are protected using Transport Layer Security (TLS) version 1.2 and higher with real-time encryption. Operational Security & Threat Management: We employ strict system segregation using AWS Security Groups and firewalls. To proactively manage risk, we run quarterly internal and external network vulnerability scans (using a PCI SSC-approved scanning vendor for external scans) and continuously monitor security alerts. Personnel Security: All personnel with administrative or systems access to our production environment must be formally approved. Additionally, all personnel with physical access to equipment that transmits sensitive information must undergo police criminal history checks. This Trust Centre serves as a comprehensive resource to help you understand the policies, controls, and practices we use to keep your data secure. Compliance PCI DSS v4.0.1 ISO/IEC 27001:2022 Risk Profile Data Access Level Impact Level Recovery Time Objective View more Product Security Audit Logging Data Security Integrations View more Reports PCI DSS Data Security Access Monitoring Data Backups Encryption-at-rest View more App Security Responsible Disclosure Application Penetration Testing Credential Management View more Data Privacy Data Breach Notifications Data Into System Data Out of System View more Access Control Access Log Management Bring Your Own Device (BYOD) Data Access View more Infrastructure BC/DR Data Center Environment Segregation View more Endpoint Security Anti-Malware Disk Encryption Endpoint Detection & Response View more Network Security Data Loss Prevention Firewall IDS/IPS View more Corporate Security Employee Training HR Security Incident Response View more Policies Acceptable Use Policy Access Control Policy Anti-Malicious Software Policy View more Incident Response Designated Response Personnel Incident Reporting Process Risk Management Data Access/Impact Levels Risk Assessments Third-Party Dependence Asset Management Asset Inventories (Hardware/Software) Asset Tracking BC/DR Business Continuity Plan (BCP) Data Backup/Backup Protection Disaster Recovery Plan (DRP) Training Role-Based Training Secure Development Training Security Awareness Training View more Change Management Change Management Program Separation of Duties Continuous Monitoring Data Loss Prevention System (DLP) Event & Audit Log Management File Integrity Monitoring (FIM) View more If you need help using this Trust Center, please contact us. Contact support