Data centers & network security

Platform and infrastructure

Socialboards is a multi tenant SaaS applications that runs - with a few exceptions - on the Microsoft Azure platform, in the West- and North-Europeanregion (Netherlands/Ireland). The built-in security services that Azure provides, protects our apps, infrastructure - and your data - with unparalleled security intelligence. It gives us the option to unify our security management and enable advanced threat protection across hybrid cloud environments.

We keep strictly to best practice processes and standards from Microsoft Azure when developing Socialboards. Read more about Azure Security Center.

Physical security

Facilities

Socialboards hosts service data in Microsoft Azure data centers. Azure infrastructure services includes certifications for ISO/IEC 27001:2013 and NIST SP 800-53, for security and reliability. The datacenters are managed, monitored, and administered by Microsoft operations staff. The operations staff has years of experience in delivering the world’s largest online services with 24 x 7 continuity. Learn more about Azure infrastructure security.

Physical security

Microsoft designs, builds, and operates datacenters in a way that strictly controls physical access to the areas where your data is stored. Learn more about Azure Physical security.

Monitoring

All Production systems are routinely monitored and logically administered by Socialboards staff. Physical security, power, infrastructure and internet connectivity are monitored by Azure.

Location

Socialboards leverages Azure data centers in Europe, in the North- and West-European regions, with tight firewall settings and agent functions to prevent data from leaving the EAA ("EØS").

Network security

Protection

Our network is protected through the use of key Azure security services, regular audits, and network intelligence technologies which monitor and/or block malicious traffic and network attacks.

Network Vulnerability Scanning

Network security scanning gives us deep insight for quick identification of out-of-compliance or potentially vulnerable systems.

Third-Party Penetration Tests

In addition to our extensive internal scanning and testing program, we'll use third-party resources for penetration tests on all parts of the system - including mobile apps and external APIs.

Intrusion Detection and Prevention

Azure network security appliances can deliver better security than what network-level controls provide. Read more about intrusion detection and prevention on Azure.

Logical Access

Access to Socialboards Production data is restricted by an explicit need-to-know basis, regional limitations, utilizes least privilege, and is controlled by our Operations Team in Oslo. Employees accessing the Socialboards Production data are required to use multiple factors of authentication.

Security Incident Response

In case of a system alert, events are escalated to our 24/7 teams providing Operations, Network Engineering, and Security coverage. Employees are trained on security incident response processes, including communication channels and escalation paths.

Encryption

Encryption in Transit

Communications between you, the client and all Socialboards modules are encrypted via industry best-practices HTTPS and Transport Layer Security (TLS 1.2) over public networks. TLS is also supported for encryption of emails.

Encryption at Rest

Both structured and unstructured data is secured by services on the Azure platform. Azure SQL Database transparent data encryption helps protect against the threat of malicious activity by performing real-time encryption and decryption of the database

Availability

Uptime

Socialboards maintains a publicly available system-status webpage which includes system availability details, scheduled maintenance, service incident history, and relevant security events. You can subscribe to updates on the same page to receive automatic notifications when new posts are published.

Backup

Backups are encrypted and securely stored on the Azure platform, with a retention time of 30 days.

Vendor overview

Uptime

Socialboards maintains a publicly available system-status webpage which includes system availability details, scheduled maintenance, service incident history, and relevant security events. You can subscribe to updates on the same page to receive automatic notifications when new posts are published.

Backup

Backups are encrypted and securely stored on the Azure platform, with a retention time of 30 days.