Data centers & network security
Last updated
Was this helpful?
Last updated
Was this helpful?
Socialboards is a multi tenant SaaS applications that runs - with a few exceptions - on the Microsoft Azure platform, in the West- and North-Europeanregion (Netherlands/Ireland). The built-in security services that Azure provides, protects our apps, infrastructure - and your data - with unparalleled security intelligence. It gives us the option to unify our security management and enable advanced threat protection across hybrid cloud environments.
We keep strictly to best practice processes and standards from Microsoft Azure when developing Socialboards.
Physical security
Facilities
Physical security
Monitoring
All Production systems are routinely monitored and logically administered by Socialboards staff. Physical security, power, infrastructure and internet connectivity are monitored by Azure.
Location
Socialboards leverages Azure data centers in Europe, in the North- and West-European regions, with tight firewall settings and agent functions to prevent data from leaving the EAA ("EØS").
Network security
Protection
Our network is protected through the use of key Azure security services, regular audits, and network intelligence technologies which monitor and/or block malicious traffic and network attacks.
Network Vulnerability Scanning
Network security scanning gives us deep insight for quick identification of out-of-compliance or potentially vulnerable systems.
Third-Party Penetration Tests
In addition to our extensive internal scanning and testing program, we'll use third-party resources for penetration tests on all parts of the system - including mobile apps and external APIs.
Intrusion Detection and Prevention
Logical Access
Access to Socialboards Production data is restricted by an explicit need-to-know basis, regional limitations, utilizes least privilege, and is controlled by our Operations Team in Oslo. Employees accessing the Socialboards Production data are required to use multiple factors of authentication.
Security Incident Response
In case of a system alert, events are escalated to our 24/7 teams providing Operations, Network Engineering, and Security coverage. Employees are trained on security incident response processes, including communication channels and escalation paths.
Encryption
Encryption in Transit
Communications between you, the client and all Socialboards modules are encrypted via industry best-practices HTTPS and Transport Layer Security (TLS 1.2) over public networks. TLS is also supported for encryption of emails.
Encryption at Rest
Both structured and unstructured data is secured by services on the Azure platform. Azure SQL Database transparent data encryption helps protect against the threat of malicious activity by performing real-time encryption and decryption of the database
Availability
Uptime
Backup
Backups are encrypted and securely stored on the Azure platform, with a retention time of 30 days.
Vendor overview
Uptime
Backup
Backups are encrypted and securely stored on the Azure platform, with a retention time of 30 days.
Socialboards hosts service data in Microsoft Azure data centers. Azure infrastructure services includes certifications for ISO/IEC 27001:2013 and NIST SP 800-53, for security and reliability. The datacenters are managed, monitored, and administered by Microsoft operations staff. The operations staff has years of experience in delivering the world’s largest online services with 24 x 7 continuity. .
Microsoft designs, builds, and operates datacenters in a way that strictly controls physical access to the areas where your data is stored.
Azure network security appliances can deliver better security than what network-level controls provide.
Socialboards maintains a publicly available which includes system availability details, scheduled maintenance, service incident history, and relevant security events. You can subscribe to updates on the same page to receive automatic notifications when new posts are published.
Socialboards maintains a publicly available which includes system availability details, scheduled maintenance, service incident history, and relevant security events. You can subscribe to updates on the same page to receive automatic notifications when new posts are published.