Security
1. Introduction
Earning and sustaining our clients' confidence has been a priority at Corebook since the beginning. IT and data security have always been integrated into each area of our development process, internal management, and data processing.
2. ISO/IEC 27001:2013
The ISO/IEC 27001:2013 standard, established by the International Organization for Standardization, is a widely recognized standard (ISO). The model provides firms with core tenets for developing, deploying, operating, and constantly upgrading an Information Security Management System (ISMS).
Corebook is officially ISO/IEC 27001:2013 accredited as of October 7th, 2022. Our security policies encompass all critical assets, procedures, and services associated with the Corebook Brand Management and Collaboration SaaS platform development and maintenance. This is regardless of where the activity or service is performed.
Corebook conducts audits internally and externally on an annual basis in accordance with ISO/IEC 27001:2013 accreditation.
3. AWS
All the production systems are deeply integrated into Amazon Web Services (AWS) which offers secure and scalable services for the Corebook environment. More information can be found at the AWS website https://aws.amazon.com/compliance/data-center/controls/
4. Servers
Servers are located in Europe and meet GDPR and EU Data Location Requirements. Private Core solution allows locating servers in other regions. Contact us to find out more.
5. TLS
All communication between users and Corebook is encrypted using TLS (up to version 1.3).
6. AES 256-bit
All the private data that is stored in our infrastructure is encrypted at transit and rest using AES 256-bit encryption.
7. Backups
We are backing up all the assets and databases twice in 24 hours. Backups are stored in two separate locations. Once a week, full data backup is stored to offline storage. A disaster recovery plan is in place.
8. Monitoring and Alerting
System uptime and usage metrics are monitored 24/7/365. For several key metrics, we set up an alert system.
We are collecting data about errors and incidents from the application or servers and investigating them as soon as possible.
9. Identity management
For access management across your organization, we support various Single Sign-On (SSO) providers. These providers are OKTA, Microsoft Azure, and Google. Other providers are available by request.
10. Private Core
Sometimes there is not enough with the standard security and features. That is why Corebook offers an isolated system setup with Enterprise level security called Private Core. Contact us to find out more.