Snapshot 222785
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Skip links CloudInvent Trust Center Built for Security, Compliance, and Transparency This page centralizes our security practices, compliance status, data handling, and FAQs. For anything not covered here, email security@cloudinvent.co. At a Glance In-Depth Security Program: A multi-layered approach encompassing network security, application security, and rigorous internal policies and procedures to safeguard company and client data. Comprehensive Data Encryption: All customer data is encrypted in transit using TLS and at rest through cloud provider native encryption mechanisms. Independent Testing & Compliance: Annual third-party penetration testing and compliance certifications, complemented by continuous vulnerability scanning and remediation. Principle of Least Privilege: Access is strictly role-based, ensuring personnel only have the tools, resources, and environments necessary for their responsibilities. Continuous Monitoring & Incident Response: Real-time security monitoring, automated alerts, and a well-defined incident response plan to quickly detect, contain, and remediate threats. Compliance & Certifications ISO 27001 ISO/IEC 27001:2022 Compliant ISO 27001 ISO/IEC 27001:2022 Compliant ISO 27001 ISO/IEC 27001:2022 Compliant ISO 27001 ISO/IEC 27001:2022 Compliant Security Practices Identity & Access SSO/SAML, SCIM (user lifecycle), MFA enforced for internal staff. Customer access uses cloud-native IAM with least-privilege managed policies. Privileged access via JIT approvals & session recording. Data Protection No customer PII required for optimization; we operate on configuration, usage, and cost metadata. KMS-backed encryption at rest; TLS 1.2+ in transit. Secrets managed in HSM-backed stores (e.g., AWS Secrets Manager). Application & SDLC Secure SDLC with SAST/DAST, dependency scanning (SCA), IaC policy checks (OPA). Change management with CI/CD approvals, 4-eyes code reviews. Platform & Infrastructure Network segmentation, private subnets, restricted egress. Hardening baselines (CIS where applicable), automated drift detection. Continuous monitoring: logs, metrics, audit trails retained per policy. Trust Center Built for Security, Compliance, and Transparency AT A GLANCE In-Depth Security Program: A multi-layered approach encompassing network security, application security, and rigorous internal policies and procedures to safeguard company and client data. Comprehensive Data Encryption: All customer data is encrypted in transit using TLS and at rest through cloud provider native encryption mechanisms. Principle of Least Privilege: Access is strictly role-based, ensuring personnel only have the tools, resources, and environments necessary for their responsibilities. Independent Testing & Compliance: Annual third-party penetration testing and compliance certifications, complemented by continuous vulnerability scanning and remediation. Continuous Monitoring & Incident Response: Real-time security monitoring, automated alerts, and a well-defined incident response plan to quickly detect, contain, and remediate threats. SECURITY CERTIFICATIONS SECURITY PRACTICES Identity & Access SSO/SAML, SCIM (user lifecycle), MFA enforced for internal staff. Customer access uses cloud-native IAM with least-privelege managed policies. Priveleged access via JIT approvals & session recording. Data Protection No customer PII required for optimization; we operate on configuration, usage, and cost metadata. KMS-backed encryption at rest; TLS 1 2+ in transti. Secrets managed in HSM-backed stores (eg., AWS, Secrets Manager) Application & SDLC Secure SDLC with SAST/DAST, dependency scanning (SCA), IaC policy checks (OPA). Change management with CI/CD approvals, 4-eyes code reviews. Platform & Infrastructure Network segmentation, private subnets, restricted egress. Hardening baselines (CIS where applicable), automated drift detection. Continuous monitoring: logs, metrics, audit trails retained per policy. POLICIES & DOCUMENTATION To ensure transparency and help you understand how we protect your data, we provide full access to our legal, security, and privacy commitments. Privacy Policy: Learn how we collect, use, store, and safeguard personal data across our platform. Terms & Conditions : Review the terms, responsibilities, and conditions that govern the use of our products and services. Security : Explore our detailed security practices, technical controls, and measures designed to protect customer data.