Information Security & Privacy
At Elemetrik, we take the security of your data very seriously. Many of our customers come from the most highly regulated and security-sensitive industries in the world, with a wide variety of security and privacy needs. We understand the importance and sensitivity of client and employee data, and are committed to maintaining high information security and privacy standards at all times.
Secure
ISO 27001:2022
GDPR
SOC Type IIGlobally recognised standards, validated by third parties and built into how we develop every feature.
ISMS
A globally recognised, standards-based approach to information security management. All standards and regulations are validated by independent third-party audits.
All ISMS policies are implemented and available on request.
Data protection
Companies using our products need to collect, store and share the personal data of clients and their candidates or employees. We ensure individuals’ data is processed transparently and only for the specific purposes for which it was collected.
New product features are built on “privacy by design” principles.
Data encryption
Every layer, from the browser to the database, is protected with industry-standard encryption.
Hosting & continuity
Elemetrik databases and servers are hosted on AWS (Amazon Web Services), offering efficient, re-sizable capacity with high availability and easy scalability.
Availability assured by AWS for our hosting infrastructure
The Elemetrik application and servers are hosted in the AWS (Amazon Web Services) environment.
MFA is enabled on the devices of authorised DevOps, and root account access is strictly restricted.
CloudTrail and CloudWatch are used across all regions for logging and monitoring, keeping a history of AWS API calls for an account.
In the event of a network or hardware failure, the application can easily be set up in a different region and services restored quickly.
All services are continuously monitored. If services are interrupted, our production support team is alerted and the issue is attended to immediately, ensuring the best possible uptime.
Data is backed up regularly, and all backups are verified monthly to ensure they are restorable. We offer the following AWS-based backup mechanisms:
Automatically performs a full daily snapshot of a database’s data.
User-initiated RDS database snapshots. Unlike the once-a-day automated backup, these can be taken as many times as needed.
Network & application security
Security within our cloud server is provided on multiple levels, each building on the capabilities of the others. The goal is to prevent data on the server from being intercepted by unauthorised systems or users, and to make the network and cloud environment as secure as possible.
Our development and QA teams are trained regularly on web application security threats and how to avoid them. We conduct regular VAPT for our applications based on OWASP principles.
Application and network-level security is in place to protect the software against issues such as:
Protected against
Endpoint security
Endpoint controls, including restricted internet access at network and system level, are implemented. We secure our network perimeter, endpoints and policies using the following solutions.
Endpoints are protected by enterprise antivirus and antimalware solutions, formally approved as our official defence against malware of any kind.
UTM is installed, covering firewall, IPS/IDS and content filtering.
Domain Controller and Active Directory policies govern access restrictions across managed devices.
All connections are secured over VPN.
Security & privacy
For any questions or requests for additional information, feel free to email us at helpdesk@elemetrik.co
