Snapshot 2274
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Trust Center Start your security review View & download sensitive information Ask for information Overview Sigma integrates with your cloud database, querying your data warehouse securely and displaying results in your browser. It provides a single access point, enabling robust data governance and restricting sensitive information access with team-based permissions. Built with security features like immutable hosts and threat detection, Sigma ensures comprehensive data protection. Access our Trust Center for the latest security reports, including ISO certifications and SOC 2. Rahul Gupta: VP, Cyber Security & Risk Supriya Muthal: Security GRC Manager Compliance CCPA EU-US DPF GDPR HIPAA ISO/IEC 27001 ISO/IEC 27017:2015 ISO/IEC 27018:2019 ISO/IEC 27701 SOC 1 SOC 2 SOC 3 Sigma Computing is reviewed and trusted by DoorDash US Foods Colgate-Palmolive Marathon Oil Devon Energy AMD Otis Elevator Co. MongoDB Depository Trust & Clearing Mindbody HashiCorp Documents Featured Documents REPORTSBC / DR REPORTSNetwork Diagram REPORTSPentest Report COMPLIANCEHIPAA COMPLIANCEISO/IEC 27001 COMPLIANCESOC 2 POLICIESInformation Security Policy Risk Profile Data Access LevelInternal Impact LevelLow Recovery Time Objective4 hours View more Product Security Audit Logging Data Security Integrations View more Reports Unified Security Policy BC / DR HIPAA Report View more Self-Assessments CAIQ SIG Core VSA Core Data Security Access Monitoring Data Backups Data Erasure View more App Security Responsible Disclosure Code Analysis Credential Management View more Legal Subprocessors Customer Audit Rights Cyber Insurance View more Access Control Data Access Logging Password Security View more Infrastructure Status Monitoring Amazon Web Services Anti-DDoS View more Endpoint Security DNS Filtering Endpoint Detection & Response Mobile Device Management View more Network Security DNSSEC Firewall IDS/IPS View more Corporate Security Email Protection Employee Training Incident Response View more Policies Business Continuity/Disaster Recovery (BC/DR) Policy Unified Security Policies Incident Response Policy View more Security Grades SecurityScorecard www.sigmacomputing.com www.sigmacomputing.com ImmuniWeb www.sigmacomputing.com A app.sigmacomputing.com A Qualys SSL Labs www.sigmacomputing.com A+ app.sigmacomputing.com A+ Knowledge Base (FAQ) Are you compliant with HIPAA privacy laws? We request to have a copy of your AI Model Inventory. Have you attached it to the questionnaire? Have you completed any AI-specific audit? We request to have a copy of your AI Risk Assessment Report. Have you attached it to the questionnaire? Are ethical concerns escalated? View more Trust Center Updates Salesloft Drift Supply Chain Incident: Key Details and Sigma’s Response Incidents 🚨Important: This incident DID NOT impact the Sigma platform, products, services, infrastructure or any data in customers’ cloud data warehouses (CDWs). At Sigma, we take the protection of our customers' data very seriously and are committed to maintaining full transparency. We are providing this update regarding a recent security incident involving our third-party vendor, Salesloft, and their Drift application. What Happened Last week, Sigma was made aware of a campaign targeted at Salesloft Drift (marketing software-as-a-service) and impacting a large number of Salesforce customers. This incident involved the theft of OAuth tokens from Salesloft Drift, a third-party application used to automate sales workflows and integrate with Salesforce to manage leads and contact information. The scope of this incident was isolated to the Salesforce instance, and there has been no impact or compromise of any Sigma product, service, or underlying infrastructure. As part of this campaign, we now understand that unauthorized actors gained access to Salesloft Drift credentials of its customers, including Sigma. A detailed review as part of Sigma’s ongoing investigation determined these credentials allowed limited access to some information in Salesforce, which Sigma uses to house business and sales related information about current and prospective customers. Scope of Impact Our immediate and ongoing investigation has determined that the accessed data was limited to business contact information and details from our Salesforce records. This includes: Business email addresses Some business phone numbers Business addresses Names Based on our extensive investigation to date, Sigma has found no evidence of misuse of this information. Our Actions and Ongoing Response Upon learning of the incident, our security team immediately launched a comprehensive response: Disconnected all Drift integrations from our systems and Salesforce platform. Out of an abundance of caution, reset all user tokens and sessions. Revoked and rotated credentials for all affected app-to-app integrations on Salesforce. Launching a detailed investigation into the scope of the event, working closely with Salesforce to assess and understand impacts as they continue investigating. Immediately launched a third party risk management investigation for third party vendors used by Sigma. We have directly notified a small number of customers whose business contact information (stated above) may have been exposed. Recommendations for Our Customers The scope of the incident remains limited (as noted above), and no evidence of misuse has been identified. While we believe the risk is minimal, we encourage customers to remain vigilant, particularly against potential phishing or social engineering attempts that could leverage exposed contact details. Sigma will never ask for sensitive information, such as passwords or financial details, through unsolicited communications. For any questions, please contact your account representative team. You can also reach out to our security team at security@sigmacomputing.com. FAQs Did the Salesloft incident have any impact on the Sigma platform or its services provided to the customers? No — the Sigma platform, its services, and infrastructure were not impacted. Customer environments, including their cloud data warehouses, also remain unaffected. Was any sensitive customer data affected? No. Based on the services Sigma provides to our customers, we can confirm that no sensitive data within customer’s cloud data warehouses were affected. What does Sigma use Salesforce for ? Sigma uses Salesforce for CRM only. We do not use it for any other purposes like customer service or support. What was the scope of the Salesloft incident for Sigma ? The issue was isolated to Sigma’s Internal Salesforce CRM instance. It involved only a very limited set of business contact details — specifically email addresses, phone numbers, and, in some cases, business addresses. Was any customer data stored in Salesforce impacted? No customer warehouse data or Sigma platform data resides in Salesforce. The affected information was limited to business contact details in Sigma’s internal CRM. Sigma Computing Not Impacted by MOVEit Vulnerability Vulnerabilities Sigma Computing not impacted by MOVEit Vulnerability We have recently been made aware of a significant MOVEit vulnerability that has garnered attention in the security community. Reports from reputable threat intelligence sources indicate that customers of this solution may be affected. You can find more information about this incident here: link to Security Week article. We want to assure our valued customers that Sigma Computing is not susceptible to this vulnerability. Our product does not rely on or incorporate this technology/software, which means that the confidentiality, integrity, and availability of our systems remain uncompromised. Moreover, we have taken additional measures to ensure and validate that none of Sigma's critical sub-processors are affected by this vulnerability. List of Sigma Sub-processors Subprocessors For a list of our subprocessors please click here. If you need help using this Trust Center, please contact us. Contact support