Snapshot 256129
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Monitored and Powered by Blacksmith Trust Center blacksmith.sh status.blacksmith.sh security@blacksmith.sh Compliance overview Current compliance status across frameworks SOC 2 Type 2 Compliant GDPR Compliant Featured documents Key security and compliance documentation Blacksmith_Software_Inc._DBA_Blacksmith_final_report Request access Blacksmith Architecture Diagram - High Level Components Request access Blacksmith Asset Endpoint Security Policy Request access View all documents Compliance Program An overview of security controls in place Access Control and Authorization Access granting process used MFA required for administrative access MFA required for applications MFA required for critical services MFA required for infrastructure access Password management policy enforced Password management policy established Data Management and Protection Consent for collecting and managing data obtained Data encrypted at rest Data encrypted in-transit Data inventory maintained Data management and retention policy established Data processing integrity and output validated Data transfer mechanisms established External privacy inquiries managed Privacy disclosure and notification mechanisms established Privacy policy created and maintained Disaster Recovery Automated backups enabled Data recovery process established Data recovery tested Disaster recovery plans tested Recovery data isolated Email Security DMARC policy and verification used Email account access restricted Email settings block malicious content Endpoint Security Anti-malware deployed on end-user devices Automatic session locking enforced Data encrypted on end-user devices Firewall maintained on end-user devices Mobile device management (MDM) used Infrastructure Security Active discovery tools used Administrator access restricted Anti-malware deployed on infrastructure Automated security scanning performed on infrastructure Buckets not exposed publicly Configuration management system established High availability infrastructure used Infrastructure changes logged Infrastructure changes require review Infrastructure deployed using an infrastructure-as-code tool Unauthorized assets addressed and removed Unique production database authentication enforced VPN used Monitoring and Incident Response Breach notification process established Incident response exercises performed Incident review process implemented Infrastructure performance monitored Log management used Organizational Security Acceptable use policy established Asset inventory maintained Asset management policy established Change management policy established Code of conduct established Company security commitments externally communicated Confidentiality Agreement acknowledged by contractors Confidentiality Agreement acknowledged by employees External support resources available (i.e., documentation) Information security program established Internal privacy policies established Internal security audit performed Offboarding process established Operational procedures maintained Password manager used Performance evaluations conducted Physical access restricted Policies signed by relevant personnel Policy for compelled disclosure from law enforcement established Reference checks performed for employees Relevant authorities identified Roles and responsibilities specified Scope for compliance framework established Service description communicated Software development lifecycle established System changes externally communicated System changes internally communicated Vendor agreements established Risk Management Data Protection Impact Assessment (DPIA) completed Risk assessments performed Vendor inventory maintained Vendor management program established Vendors classified by data sensitivity Vendors classified by risk level Vulnerability Management Automated software patch management performed Penetration testing findings remediated Penetration testing performed within the last 12 months Vulnerabilities scanned