Snapshot 221255
Normalized text
Scripts and page chrome removed; this is what change detection compares.
You're in safe hands We created Yoti to give everybody a secure, private way of proving their identity. Security is at the heart of what we do. If you have a query, get in touch with our security team. [email protected] Compliance, security and memberships We commission regular external audits of our business and have been certified to meet some of the world’s most stringent security standards, such as ISO 27001 and SOC2 Type II. Platform security The security and privacy of data is paramount in the design of the Yoti platform. It incorporates several features to achieve this. Product security Some of our products and services have additional security considerations, which you can find explained here. Yoti Security Centres The highly sensitive operation of verifying identity documents is carried out at our security centre facilities that are run under strict operating procedures designed to maintain data security. Physical security: Yoti Security Centres are manned by operations staff 24/7 and access is controlled by multiple security doors, keyfobs, RFID tags and fingerprint scanners. Access to security rooms is protected with fingerprint scanners and staff are prohibited from entering with personal devices or equipment. The floor is protected with CCTV. Staff vetting: Strict staff vetting involves a fraud check, and a CallValidate check for ID verification, address verification, bank verification, PEP (Politically Exposed Persons), County Court Judgements, and basic DBS (Disclosure and Barring Service) checks. In India the checks involve an identity and address, employment history verification, education/qualifications, credit history, police record and court records database. Software architecture: End-user terminals run ‘thin clients’ restricted to specific processes with no other functions or network access possible. There are also 4 Supervisor Desks located in a protective area which gives access to a limited number of internal applications which allow the Senior Supervisor and Team Leaders to respond quickly an efficiently to queries. Access to these PC’s are via a separate VPN and also a Yubi Key (Security Key). Network architecture: All communication between the security centre terminals and Yoti production systems elsewhere is protected by means of a firewalled and encrypted VPN. Internal controls Some of our products and services have additional security considerations, which you can find explained here. Security Forum: Yoti’s Security Forum has been established to help ensure that there is a clear direction and visible management support for security initiatives. The Security Forum has responsibility for implementing Yoti’s suite of Information Security Management System policies, helping to ensure that there is an appropriate level of security awareness and training among Yoti employees, and reviewing key inputs such as security incidents and audit reports Policies: ISMS, SOC2 Controls Peer Review policy Employee training: All employees receive mandatory security and data privacy training during their probation period, and then have to take an annual refresher. Employee background checks: Potential employees are subject to ID verification checks prior to commencing employment, along with a CIFAS fraud check for UK-based staff. Roles defined as sensitive are subject to further checks, such as PEP and Court Judgements, as well as DBS checks for UK-based staff and police verification for India-based staff.