Information Security

All great partnerships are based on trust…we’ve got your back!

We understand that the security of your data and the availability of our services are of the utmost important. That is why the Connectr platform is built and maintained (with love) by an experienced engineering team following industry best practices. We are trusted by some of the world’s largest companies operating in highly regulated domains.

Secure Hosting

Connectr is hosted on Amazon Web Services (AWS) infrastructure across two Availability Zones in the UK. AWS data centres are secure by design and comply to recognized controls and security assurance certification including ISO, SOC, NIST, etc.

Security Assurance Certification

We are Cyber Essentials certified. Our Information Security Management System is set up to best practice and our platform operations, Head Office and London Office are all certified within ISO27001 : 2013.

Availability

Connectr adheres to the NCSC Cloud Security Principles and our uptime is monitored and guaranteed by Service Level Agreement. Our services are backed with a full Business Continuity Plan.

Encryption

Data is encrypted for transmission and at rest using industry standard cryptography (TLS 1.2 & AES-256). User data is never used in other environments for other purposes like quality assurance testing. Personally identifiable information is never stored in supporting systems such as logging and analytics.

GDPR

We take the handling of your data seriously. Our services are covered by a Data Protection Agreement in line with UK-GDPR requirements and all of your data on the Connectr Platform is stored in the UK. Our processes conform with ISO27001 : 2013.

Secure Engineering Processes

All work is subject to peer review against OWASP Top 10 and release pipelines are gated. Automated testing and security linting is part of CI and release pipelines. The Connectr platform undergoes an annual penetration test by an external CREST accredited test partner.

Access Controls

Connectr user accounts with elevated permissions are protected with 2fa and software used to develop the Connectr platform is secured with 2fa.