Our platform offers two most widely used protocols for SSO (Single Sign -On) authentication – SAML (Security Assertion Markup Language) and OIDC (OpenID Connect). It also offers MFA (Multi-Factor Authentication). Email and SMS verification are two common methods used to enhance the security of accounts and the same are offered.

Encryption is used for data in transit using at a minimum TLS 1.2 - no communication between components or systems happens other than via HTTPS. This starts right at the load balancer, which rejects all unencrypted traffic before it can even access systems or applications. Within the platform data is encrypted from end-to-end including in the Kubernetes clusters. Data at rest is encrypted using FIPS Level 2 validated encryptors.

The default Data Retention policy for our platform is 24(twenty-four) months. Should you require longer storage needs, arrangements can be made through your sales executive.

It is hosted in two AWS regions (US-East and US-West) for US based clients. Within an AWS region, the platform service leverages the multi-AZs (availability zones) deployment model. Thus, the architecture offers a highly available service that is tolerant to single region outages.

Database service is hosted in three AWS regions (US-East, US-West and US-Central) and the data is seamlessly replicated across these regions to provide a highly available database that offers protection against single region failures. Additionally, the data is backed up following the best practices.