Trust and Security

Logging and monitoring play a pivotal role in our operations. We systematically monitor and analyze information gathered from services, internal network traffic, and device usage. Event logs, audit logs, fault logs, administrator logs, and operator logs are automatically monitored and analyzed to identify anomalies promptly. These logs are securely stored on a server isolated from full system access.

Our dedicated vulnerability management process utilizes certified third-party scanning tools, in-house tools, automated and manual penetration testing. Our security team actively reviews security reports and monitors public sources to identify and address security incidents promptly. Identified vulnerabilities are logged, prioritized based on severity, assigned to an owner, and tracked until closure.

We employ an automated scanning system to scan all user files, preventing the spread of malware. Regular updates from external threat intelligence sources enhance our custom anti-malware engine, ensuring robust protection against malicious patterns.

Employees undergo training in information security, privacy, and compliance upon induction. Regular evaluations and continuous education in our internal community ensure ongoing awareness and understanding of security practices. Specific security aspects are continually addressed through targeted training sessions and internal events, fostering awareness and driving innovation in security and privacy.

Our dedicated security and privacy teams implement and manage robust security and privacy programs. They provide domain-specific consulting services, guidance to engineering teams, and ensure the constant monitoring of networks. The security and privacy teams are instrumental in maintaining our defense systems, developing review processes, and ensuring the security of our infrastructure.