Snapshot 222635
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Domotz Trust Center Overview OverviewPlatform SecuritySecurity OperationsData ProtectionCertifications & StandardsPlatform AvailabilityResponsible DisclosureSecurity News Certifications Documents Data Protection FAQ 📈Service Status 🪲Report a vulnerability 🚩Report a complaint 📰Security News Domotz Trust & Security Security and trust are core to Domotz. We are committed to safeguarding your data, delivering secure network observability, and providing transparency in everything we do. Our platform is built from the ground up to meet the rigorous standards of modern cybersecurity — giving you confidence in the integrity, availability, and confidentiality of your systems. This portal gives you a full understanding of our approach to data privacy, cybersecurity, governance, and compliance. You can access documentation detailing our security controls, certifications, data handling practices, and commitment to protecting your information throughout the entire lifecycle of our service. Certifications ISO 27001 Certificate More information SOC 2 Type II Report 2026 More information Platform Security Security Operations Data Protection Certifications & Standards Platform Availability Responsible Disclosure Security News Platform Security Domotz is designed with robust, layered security controls to ensure our platform can be trusted across IT, OT, and IoT environments. Encrypted Communication: All communication between Domotz Agents and the cloud backend is encrypted using TLS 1.2 or higher. No open inbound ports are required. Hardened Agents: Our software Agents are built with security in mind — they run in a restricted environment, require no permission elevation, and can be easily updated when needed. Granular Access Control: Our role-based access control (RBAC) system allows fine-grained permissions, ensuring users only see what they’re authorized to access. SSO and MFA Support: We support SAML-based Single Sign-On and require or recommend multi-factor authentication to strengthen user identity protection. Zero Trust Principles: We apply Zero Trust strategies internally and across our services, assuming breach and verifying every access request. Continuous Security Testing: Penetration tests and automated vulnerability scans are performed regularly to identify and address potential risks. Security Operations Our security practices are embedded into every stage of our software development and cloud operations. ISO/IEC 27001 Certified: Domotz is certified under ISO/IEC 27001, demonstrating our commitment to managing information security according to global best practices. OWASP & CIS Frameworks: We adhere to OWASP secure coding standards and CIS Critical Security Controls to protect against common vulnerabilities and maintain a strong security posture. Automated Threat Detection: Our infrastructure is instrumented with log aggregation and SIEM tooling to flag suspicious behavior and support incident investigations. Secure Software Development Lifecycle (SSDLC): Security is built into our development process, with regular code reviews, dependency checks, and static/dynamic analysis tools. Patch & Vulnerability Management: We monitor and promptly patch known vulnerabilities across our software, infrastructure, and third-party dependencies. Internal Security Awareness: All employees receive security training to promote secure coding, data protection, and awareness of phishing and social engineering. Strict Access Controls & Auditing: Administrative access is granted on a need-to-know basis and continuously audited. We apply access rules—including multi-factor authentication, SSO, and password management—in accordance with NIST guidelines for managing memorized secrets. Data Protection Protecting your data is our top priority. We apply rigorous controls and transparency to ensure data privacy and compliance. End-to-End Encryption: All data is encrypted in transit (TLS 1.2+) and at rest using AES-256 encryption standards. We follow NIST recommendations for selecting strong encryption algorithms, security protocols, and managing cryptographic keys. Minimal Data Collection: Domotz only collects the data necessary to operate the platform and provide observability. Customers have visibility into what is monitored and how data is used. Data Residency & Storage: All customer data is stored in secure, SOC 2-compliant data centers operated by leading cloud providers. Where applicable, we respect data residency requirements. Privacy & Compliance: We comply with GDPR, CCPA, and other data protection frameworks. Our Data Processing Agreement (DPA) and privacy policy detail how data is handled. Physical & Data Center Security: Domotz servers are hosted on Amazon Web Services (AWS), in state-of-the-art data centers with 24/7 security guard protection, electronic surveillance, and multi-factor access controls. These facilities are ISO 27001, ISO 27017, and ISO 27018 certified, and undergo regular SOC 2 Type II audits. Subprocessors: We work only with carefully vetted subprocessors who meet our security and privacy standards. A list of subprocessors is available here. Certifications & Standards We align with global security frameworks and industry best practices to maintain the highest level of trust. ✅ ISO/IEC 27001 Certification ✅ SOC 2 Type II ✅ GDPR and CCPA Compliance ✅ Adherence to OWASP & CIS Controls® 🛡️ Pursuing Cybersecurity Maturity Model Certification (CMMC) 🔐 Regular Penetration Testing and Third-Party Security Assessments Platform Availability We believe trust also means being transparent about our service uptime and performance. You can always check the real-time operational status of the Domotz platform at: 🔗status.domotz.com Our status page provides live updates on system health, scheduled maintenance, and incident history to keep you informed. Responsible Disclosure We welcome input from the security community. If you discover a vulnerability in our platform, please report it responsibly by contacting it-security@domotz.com. We are committed to timely investigation and resolution of all valid reports. Security News November 27, 2025 - Domotz update on Mixpanel Security Incident On November 27, we were informed by Mixpanel, one of our subprocessors, that they experienced a security incident affecting a limited number of their customers. Mixpanel has individually notified the impacted customers, and Domotz is not among them. We confirm that all Domotz customer data processed through Mixpanel remains secure and was not affected by this incident. Moreover, all our internal accounts used to access Mixpanel are protected with multi-factor authentication (MFA) and are continuously monitored. Powered by