Snapshot 2461
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Security by design Over 74,000+ customers across the globe trust us with their data being processed by our products. We back ourselves up with robust data security and privacy practices that are integral to our product engineering and service delivery principles. Freshworks Trust Center This is your one-stop shop for all cybersecurity needs. Here, you'll find all our cybersecurity certifications, attestations, and other cybersecurity documents, ensuring you have everything you need to complete your security review. View Trust Center Behind the scenes A multi-fold model of security architecture, robust product delivery, and a highly resilient service platform are the fundamental tenets of Freshworks' service delivery. Protecting your data Multi-tiered data security model Secure product build End-to-end security in product lifecycle Highly resilient architecture Always lights-on for your business Protecting your data We understand the value of data. With our robust system of data safeguards, we allow you to focus on the data rather than on data security. Our secure hosting parter Virtual private cloud Hosted in dedicated VPCs in a non-promiscuous mode that is further segmented for increased security and manageability. Perimeter security Routing rules are hardened based on pre-established criteria for various permissible transactions across all resources. Access controls Role-based access through IAM enforces segregation of duties, two-factor authentication, and end-to-end audit trails, ensuring access in accordance with the security context. Encryption AES 256-bit encryption when data is encrypted at rest and HTTPS with TLS 1.2 encryption for data in transit. Management plane Secure administrative tunnel with whitelisted IP addresses for connection to the servers for administrative purposes through Teleport. Malware & spam protection Malware and spam protection is applied based on the latest threat signatures and supports real-time scanning and security. Secure product build Information security and data privacy requirements are baked into every release cycle and form part of the product blueprint considerations. Product roadmapping The product roadmap is defined and reviewed periodically by the product owner. Security fixes are prioritized and bundled in the earliest possible sprint. DevOps squad Our DevOps sprints are powered by a multi-disciplinary squad of members, including a product wwner, squad lead, and quality assurance. Code review All changes are tested by the quality assurance team, and criteria are established for performing code reviews, web vulnerability assessments, and advanced security tests. Quality assurance Builds are put through stringent functionality, performance, stability, and UX tests before the build is certified "good to go." Version control Source code is managed centrally with version controls and access restricted based on various teams that are assigned to specific sprints. Records are maintained for code changes and code check-ins and check-outs. Segregation of duties Access to the production environment is restricted to a very limited set of users based on the job roles. Access to the production environment for developers and quality assurance team members is restricted based on job responsibilities. Blue-green deployment We follow a blue-green strategy for deploying changes to production environment that allows us to deploy upgrades seamlessly. Highly resilient architecture The architecture is built with resiliency to ensure the high availability of our product. Component redundancy All components are deployed in ‘n+1’ mode across multiple availability zones configured in active-active mode behind a load balancing service. Highly scalable DNS Route users to the best endpoint based on geo-proximity, latency, health, and other considerations. Platform load balancing Automatic distribution of application traffic across multiple availability zones that support high availability, auto-scaling, and robust security. Data backup Near real-time backups are maintained in another AWS availability zones. Cloud snapshots are taken every day and retained for the last seven days. Cross-geo redundancy Multiple availability zones are set up and serve customers in real-time, providing seamless DR capability. Incident & breach management Procedures are established for reporting and tracking incidents for timely communication, investigation, and resolution. Content distribution network Geographically distributed network of proxy servers and their data centers. The goal is to distribute services spatially relative to end-users to provide high availability and high performance. Security operations 24x7 monitoring and situation awareness through the detection, containment, and remediation of any suspected or actual security incidents. Tactical rules and data sensors are configured to provide suitable early warnings and alerts. Capacity management Proactive capacity monitoring based on conservative thresholds and on-demand capacity expansion capability through our highly elastic hosting partners.