Snapshot 5997
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Trust Center Start your security review View & download sensitive information Ask for information Overview Welcome to Datafy's Trust Center. Our commitment to data privacy and security is embedded in every part of our business. Use this Trust Center to learn about our security posture and request access to our security documentation. Compliance Certi-Trust ISO 27001 HIPAA SOC 2 Type 2 Knowledge Base (FAQ) Does Datafy read, access, or use any data stored in our EBS volumes? Can you sign a GDPR DPA (with SCCs / UK IDTA)? What privileges does the agent require (Linux capabilities / Docker flags / Kubernetes), and is there a non-privileged mode? When was the last third-party penetration test, what was the scope, and can we receive the summary? What is the control-plane RTO / RPO? Is it multi-region / multi-AZ? View more Documents REPORTSPentest Report REPORTSSOC2 Type 2 Report + HIPAA COMPLIANCECerti-Trust ISO 27001 COMPLIANCESOC 2 Type 2 APP SECURITYApplication Penetration Testing AIAI Overview ACCESS CONTROLHuman Resource Security ACCESS CONTROLPassword Security ACCESS CONTROLUser Access Review CORPORATE SECURITYPenetration Testing POLICIESAcceptable Use Policy POLICIESAccess Control Policy Risk Profile Data Access LevelInternal Impact LevelLow HostingMajor Cloud Provider Product Security We pay great attention to enterprise features such as access control and single sign on. We are happy to provide more details about our enterprise features upon request. Reports SOC2 Type 2 Report + HIPAA Pentest Report SOC 2 Type 2 Report Self-Assessments We are working on our security compliance. We can provide completed questionnaires upon request. Data Security Data Backups Encryption-at-rest Encryption-in-transit View more App Security Application Penetration Testing Code Analysis Secure Development Training AI AI Overview ESG We prioritize and take environmental, social, and governance (ESG) considerations seriously in our operations and decision-making processes. Legal Subprocessors Data Privacy Privacy of customer data is top of mind. We follow industry best practices and follow all applicable privacy regulations. Access Control Human Resource Security Password Security User Access Review Infrastructure Status Monitoring BC/DR Cloud Service Providers View more Endpoint Security Anti-Malware Disk Encryption Endpoint Detection & Response Network Security We protect our corporate network against external & internal threats. Corporate Security Email Protection Employee Training Penetration Testing Policies Acceptable Use Policy Access Control Policy AI System Development and Evaluation Policy View more Security Grades We are constantly monitoring the security of our website. We will post our grades from public security rating agencies when they become available. Incident Response We have a dedicated team that responds to security incidents. We are happy to provide more details about our incident response practices upon request. Risk Management We have a dedicated team that manages security risks. We are happy to provide more details about our risk management practices upon request. Asset Management We have strict asset management policies in place to ensure that all assets are accounted for and secure. BC/DR We have a business continuity plan in place to ensure that we can continue to operate in the event of a disaster. Training Employee Privacy Training Secure Development Training Security Awareness Training View more Change Management We have a change and configuration management process in place to ensure that changes are properly reviewed and approved. Physical & Environment We have physical and environmental controls in place to ensure that our data centers are secure and reliable. Continuous Monitoring We continuously monitor our systems for security threats and vulnerabilities. We are happy to provide more details about our continuous monitoring practices upon request. Subprocessors