Snapshot 2803
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Skip to main content Enterprise Security System security you can trust Our products are SOC 2 Type II audited and are validated by both internal and external security experts to ensure they comply with industry-level security standards and requirements. We welcome your feedback and invite you contact us with any concerns on product security. Security Profile Enterprise information security and data protocols At YuJa, we understand the importance of information and data security. To help ensure product security and data integrity, we have taken necessary measures to ensure you can confidently and safely use our products and services. We are trusted by leading academic and public-sector institutions around the world to power their campuses and organizations, and we take that responsibility seriously. Data security processes YuJa completes database replication processes across multiple physical data center zones in real-time. Further, we take hourly snapshots of data that are stored physically apart from our production infrastructure. Wide enterprise compatibility All our products conform to the latest Learning Tool Interoperability (LTI) and Single Sign On (SSO) standards to ensure a seamless experience without needing to manage multiple passwords. Role-based permissions YuJa provides fully customizable role-based permissions for every product. Users can automatically map existing LMS roles, or manage access permissions individually. Security-attested hosting YuJa is hosted on industry-leading cloud infrastructure with top-level security attestation, confidential locations, and multiple vulnerability detection layers to prevent unauthorized access to hardware and infrastructure. Security Certifications Compliance with industry-wide security standards YuJa conducts a variety of audits to help ensure continuous compliance with industry standard best practices. YuJa maintains security policies that are maintained, communicated, and approved by management to ensure everyone clearly understands their security responsibilities. YuJa policies are audited annually as part of its SOC 2 certification. Security Security practices that safeguard your data Access control We strictly enforce the principle of least privilege, ensuring that system and data access is limited only to authorized personnel based on their specific roles. All access rights are subjected to rigorous, periodic reviews to ensure continuous security alignment. Vulnerability management We take a proactive stance against emerging threats by conducting comprehensive internal and external vulnerability assessments. This includes regular, in-depth application-level logic scans to identify, evaluate, and mitigate risks before they can be exploited. Operations security Our infrastructure is built for resilience and high availability. We maintain secure system configurations, run continuous backups, and perform 24/7 monitoring to manage daily operations securely and ensure business continuity. Data protection & communications security We safeguard your sensitive information using industry-leading encryption protocols. All customer data is encrypted at rest using AES-256 or higher. Furthermore, data in transit is protected by strict communication standards, enforcing a minimum of TLS 1.2 (with TLS 1.3 by default) to guarantee secure information transfer. Personnel security Security starts with our team. Every employee undergoes a comprehensive background check prior to employment. To maintain a strong security-first culture, we require rigorous security training during onboarding, supplemented by continuous security awareness education throughout their lifecycle at YuJa. Logging and monitoring We utilize continuous SIEM (Security Information and Event Management) monitoring across our infrastructure to rapidly detect, analyze, and respond to potential security events. To ensure full traceability, transparency, and compliance, comprehensive access and audit logs are securely maintained for a minimum of one year. Secure development Security is integrated directly into the core of our software development lifecycle. We employ automated vulnerability scans during pull requests, static code analysis for maximum security and quality, and a rigorous combination of AI and human-driven code reviews prior to deployment. Endpoint security & anti-malware We strictly control the devices that access our network. All corporate devices are secured with full-disk encryption (such as BitLocker), managed through centralized Single Sign-On (SSO), and equipped with advanced endpoint anti-malware software to protect against unauthorized access and malicious software. Secrets management We utilize state-of-the-art secret and password managers to ensure that all highly sensitive data—such as passwords, API keys, and cryptographic materials—are stored using robust encryption and strict, zero-trust access controls. Security Statistics Security at a glance SOC 2 Type II certified Independently audited for security, availability, confidentiality & privacy 99.9% Service availability Infrastructure is designed for high availability and reliability. 24/7 System monitoring Public status page with real-time availability and incident history AES-256 Standard encryption Data is encrypted at rest using industry-standard encryption. 24h Incident response Security events are investigated and responded to according to established processes. TLS 1.3 Secure transit Data is encrypted during transmission using modern TLS protocols. Join the 1,000+ Organizations Deploying High-Impact Solutions A collection of logos representing various organizations and institutions that use YuJa’s platform. This website uses cookies to improve your experience. We'll assume you're ok with this, but you can opt-out if you wish. Read our Privacy Policyopens in a new tab Got it Privacy & Cookies Policy