Snapshot 2218

Document
Security page
URL
https://www.polytomic.com/security
Fetched
HTTP status
200
Content type
text/html; charset=utf-8
Fetch mode
static
Size
66048 bytes
SHA-256 (raw)
de89d9576104f165285b2b53e310447ee5c19f5daff0d8a4e21c47f2ea066f87
SHA-256 (normalized text)
d52698fe666ac0e5b1c39976fefed3d36b6fa25f2a8fe151d9227cebf8eaaf0b

Normalized text

Scripts and page chrome removed; this is what change detection compares.

Polytomic Security
Security practices
Introduction
This page covers the security aspects of Polytomic's infrastructure. Please contact support@polytomic.com with any questions.
Deployment options
Polytomic can be accessed either through a hosted version running on Polytomic's cloud, or a self-hosted version that runs in your private cloud. Different security options (e.g. AWS PrivateLink) are also available for the hosted version.
Standards compliance
Polytomic is compliant with SOC 2 Type II, GDPR, HIPAA, and CCPA. Polytomic is regularly audited by third-party security auditors that employ industry best practices in their testing methodology.
Should you require Polytomic's SOC 2 Type II or penetration-testing reports, please submit your request to support@polytomic.com.
Encryption
Whether dealing with in-transit or at-rest data, Polytomic employs robust encryption as one of multiple defence mechanisms against unauthorized access of data.
AWS RDS encryption
Customer credentials are stored in Polytomic's encrypted AWS (Amazon Web Services) RDS database. The database is encrypted using AES-256 and envelope encryption. This ensures that customer credentials are stored with the utmost security.
AWS KMS
Polytomic's encryption keys are managed by AWS KMS (Key Management Service). This allows Polytomic to enable industry best-practices as well as centrally manage encryption keys and their policies.
In-transit data
Data-syncing is a major part of Polytomic's platform, thus Polytomic's encryption regime extends to all data in-transit being encrypted with TLS (Transport Layer Security).
Retention
Polytomic does not retain customer data by default. All customer data processing occurs for the duration of an active sync as initiated by the customer.
Polytomic does retain data if the Harbor product is activated. In that case, all retained data within a Harbor is automatically deleted when a customer de-provisions the Harbor or if the customer's subscription with Polytomic ends.
Polytomic has the ability to store sync history logs, however this ability is controlled by the customer. Should the customer turn on sync history logs, Polytomic will automatically delete them after 30 days. Log deletion cannot be overridden.
Questions? Contact support@polytomic.com.