Snapshot 35811
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Security by design: Trust by default At Bandwidth, security is built into everything we do, providing a foundation of trust for your services. Our security program is designed to protect your data and communications, ensuring the reliability and integrity that your customers expect. We are independently certified and compliant with global standards to give you confidence in our platform. See Bandwidth’s certifications Secure product development We embed security from the ground up, so our products are secure by design. This means your services are built on a resilient and trustworthy foundation with Bandwidth. Early-stage Threat modeling and risk assessments are conducted before any coding begins. Architecture Security architecture reviews integrate privacy from the outset. Secure coding We follow secure coding practices aligned with the OWASP Top 10 and other industry standards. Developer training All engineers are required to complete secure development training. Automated analysis Automated static and dynamic analysis is built into our CI/CD pipeline, catching vulnerabilities before they can impact your service. Continuous operations and threat monitoring Our dedicated security teams work 24/7 to protect our network and your services from threats. 24×7 Monitoring Our Security Operations Center (SOC) and Network Operations Center (NOC) continuously monitor our on-premises, cloud, and product environments. AI-driven analysis We use AI for event analysis and correlation to ensure rapid detection and response to potential issues. Threat detection Our systems include intrusion detection, DDoS mitigation, and anomaly detection to protect against attacks that could impact your service availability. Real-time intelligence We perform real-time analysis and ingestion of global threat feeds and actively monitor third-party and supply-chain risks to stay ahead of threats. Data protection and encryption We combine strong encryption with privacy-first principles to protect sensitive data. Data encryption We employ encryption for data both in transit and at rest, using protocols like TLS, SIPS, and SRTP to secure data and access to our products and services. Data minimization We only collect the data that is necessary, and we use anonymization and pseudonymization techniques to reduce data identifiability. Retention We follow strict data retention schedules that align with global requirements, ensuring data is not held longer than necessary. Secure access to the Bandwidth App We implement robust access and identity controls to ensure you are always secure and protected. Multi-factor Authentication (MFA) We provide an additional layer of security with MFA for all users. Single Sign-On (SSO) SSO support offers you a convenient and secure way for your users to access our App with consistent, reliable authentication. Validation and audits We continuously assess and strengthen our security posture to ensure your confidence in our platform. Penetration testing We conduct regular internal and independent third-party penetration tests. Bug bounty Our public bug bounty program encourages responsible disclosure from the security community. Report a vulnerability Resilience testing We regularly test our systems for DDoS resilience to ensure service availability and uptime. Certifications and compliance ISO 42001:2023 certified ISO 27001:2022 certified SOC 2 Type II compliant GDPR global regulation alignment CCPA regulation alignment Meets HIPAA security requirements for eligible services “As AI becomes central to enterprise communications, ISO 42001:2023 certification gives our customers confidence that Bandwidth’s AI is governed, audited, and built to the highest standard across our entire platform.” Andrew Grimmett, VP of Information Security