Data centers & network security

Platform and infrastructure

Socialboards is a multi tenant SaaS applications that runs - with a few exceptions - on the Microsoft Azure platform, in the West- and North-Europeanregion (Netherlands/Ireland). The built-in security services that Azure provides, protects our apps, infrastructure - and your data - with unparalleled security intelligence. It gives us the option to unify our security management and enable advanced threat protection across hybrid cloud environments.

We keep strictly to best practice processes and standards from Microsoft Azure when developing Socialboards. Read more about Azure Security Center.

	Physical security
Facilities	Socialboards hosts service data in Microsoft Azure data centers. Azure infrastructure services includes certifications for ISO/IEC 27001:2013 and NIST SP 800-53, for security and reliability. The datacenters are managed, monitored, and administered by Microsoft operations staff. The operations staff has years of experience in delivering the world’s largest online services with 24 x 7 continuity. Learn more about Azure infrastructure security.
Physical security	Microsoft designs, builds, and operates datacenters in a way that strictly controls physical access to the areas where your data is stored. Learn more about Azure Physical security.
Monitoring	All Production systems are routinely monitored and logically administered by Socialboards staff. Physical security, power, infrastructure and internet connectivity are monitored by Azure.
Location	Socialboards leverages Azure data centers in Europe, in the North- and West-European regions, with tight firewall settings and agent functions to prevent data from leaving the EAA ("EØS").

	Network security
Protection	Our network is protected through the use of key Azure security services, regular audits, and network intelligence technologies which monitor and/or block malicious traffic and network attacks.
Network Vulnerability Scanning	Network security scanning gives us deep insight for quick identification of out-of-compliance or potentially vulnerable systems.
Third-Party Penetration Tests	In addition to our extensive internal scanning and testing program, we'll use third-party resources for penetration tests on all parts of the system - including mobile apps and external APIs.
Intrusion Detection and Prevention	Azure network security appliances can deliver better security than what network-level controls provide. Read more about intrusion detection and prevention on Azure.
Logical Access	Access to Socialboards Production data is restricted by an explicit need-to-know basis, regional limitations, utilizes least privilege, and is controlled by our Operations Team in Oslo. Employees accessing the Socialboards Production data are required to use multiple factors of authentication.
Security Incident Response	In case of a system alert, events are escalated to our 24/7 teams providing Operations, Network Engineering, and Security coverage. Employees are trained on security incident response processes, including communication channels and escalation paths.

	Encryption
Encryption in Transit	Communications between you, the client and all Socialboards modules are encrypted via industry best-practices HTTPS and Transport Layer Security (TLS 1.2) over public networks. TLS is also supported for encryption of emails.
Encryption at Rest	Both structured and unstructured data is secured by services on the Azure platform. Azure SQL Database transparent data encryption helps protect against the threat of malicious activity by performing real-time encryption and decryption of the database

	Availability
Uptime	Socialboards maintains a publicly available system-status webpage which includes system availability details, scheduled maintenance, service incident history, and relevant security events. You can subscribe to updates on the same page to receive automatic notifications when new posts are published.
Backup	Backups are encrypted and securely stored on the Azure platform, with a retention time of 30 days.

	Vendor overview
Uptime	Socialboards maintains a publicly available system-status webpage which includes system availability details, scheduled maintenance, service incident history, and relevant security events. You can subscribe to updates on the same page to receive automatic notifications when new posts are published.
Backup	Backups are encrypted and securely stored on the Azure platform, with a retention time of 30 days.