Security policy
This security policy is applicable from 2022, July 1st.
Security and Trust
Keeping your data safe and secure is paramount. We adopt industry standard design-led approaches to security at all levels from the way we design our software, its deployment, maintenance, monitoring and platform architecture, and operational standards. At all times you retain control over the data Corphedge has access to and the transactions that occur and at any time can request a deletion of all personal data.
Contact
User processed data
CorpHedge is committed to the security of the data you process with us. To that end, we have created our systems from the ground up based on security and data protection best practices
We do not store the data that you load using our data integrations. At no time does your data ever enter a backup, except for a few access cases where third-party APIs do not provide access to historical data. We cache data for the time required for us to serve you in an efficient manner. In almost all cases, data remains in secure short-lived caches.
Website, account management, and purchases
All connections to any of our services, our web portal, our account management system, and any purchases you make are encrypted by default using industry-standard cryptographic protocols (TLS 1.2+).
Any attempt to connect over an unencrypted channel (HTTP) is redirected to an encrypted channel (HTTPS).
Our network security architecture consists of multiple security zones. We monitor and protect our network, to make sure no unauthorized access is performed using:
- A virtual private cloud (VPC), a bastion host or VPN with network access control lists (ACL’s), and no public IP addresses.
- A firewall that monitors and controls incoming and outgoing network traffic.
- An Intrusion Detection and Prevention technologies (IDS/IPS) solution that monitors and blocks potential malicious packets.
- A Web Application Firewall (WAF) to protect our applications, increase visibility, and secure code.
- IP address filtering.
We also use Distributed Denial of Service (DDoS) mitigation services powered by an industry-leading solution.
Cloud Infrastructure
All of our services run in the cloud. We do not host or run our own routers, load balancers, DNS servers, or physical servers. Corphedge uses leading cloud providers to process your data. what have excellent compliance and regulatory audits including SOC 1/2-3, PCI-DSS, and ISO27001.
Company policies
CorpHedge requires that all employees comply with security policies designed to keep any and all client information safe, and address multiple security compliance standards, rules and regulations. We ensure that all employees are immediately trained on our security policies and at the very least annually conducted thereafter.
Two-factor authentication, VPNs, and strong password controls are required for administrative access to systems. All such policies are reviewed on a regular basis.
This security policy is applicable from 2022, July 1st.