Security Policy

Security

The security of your data is our top priority.

Last updated 25th June 2019

Server security

We take the security of your data very seriously and follow best practise procedures to secure our servers, including:

  • Use of fire-walling on sensitive services such as databases.

  • 256bit SSL data encryption of all data going between You and Intelliforma, and when Intelliforma backs up Your data.

  • Timely installation of software security patches.

  • Use of strong passwords.


Physical security and hosting facilities

Intelliforma is hosted in top grade hosting facilities that employ robust physical security controls including professional security staff, video surveillance, two factor authentication for authorised staff access, with all physical access routinely logged and audited. Albaware maintains multiple geographically separated data replicas and hosting environments to minimise the risk of data loss or outages.


Security monitoring

The Intelliforma team continuously monitors security systems, event logs, notifications and alerts from all systems to identify and manage threats.


Availability of the Service

Intelliforma uses multiple redundancy technologies for its hardware, networks, data centres and infrastructure to ensure it maintains uptime of the Service. Our hosting provider provides 24x7x365 coverage to detect incidents and to manage the impact and resolution.


Disaster Recovery and backup procedures

Albaware performs real-time data replication between its geographically diverse, protected facilities, to ensure Your data is available and safely stored. This means that should a worst-case scenario such as entire hosting facility failure take place, Albaware can quickly switch to a backup site to keep the Service running.

Albaware takes a snapshot of all customer data twice daily. Once all data has been dumped it is transferred to a secure volume.

Albaware aims to have a minimum of 7 daily snapshot backups available at all times for disaster recovery purposes.


Access to information

Only Albaware personnel have access to customer data within the servers. Our hosting provider does not have access rights to any such data except for the limited purpose of storing the information. At Albaware, only the minimum number of people necessary have access to this data, and it is restricted to senior engineering personnel.

In some cases it may be necessary to grant access to external vendors for support purposes, however, all access is monitored by senior engineering personnel.