Information Security
Updated as of January 16th, 2022
The safety and security of your information is very important, and protecting it is a priority to us. EA Composer software and infrastructure have been designed with the highest security among Cloud software environments.
Data Centers
Our data centers are all ISO/IEC 27001:2013, ISO 9001 (quality management), ISO 14001 (environment management), ISAE 3402 Type II, and IDW PS951 certified. Of course all the required physical, bio-metrical and logical access controls are in place at these locations. There are multiple layers of firewalls at these locations as well.
Data Access
All access to your data is using SSL encryption for the transport layer. We use encrypted keys for session management. All user passwords are stored encrypted in our database. Even our support staff can’t access your data. All access to the database and file system from the application is using a dedicated security layer which has additional security access controls. When at rest on our servers your data is always encrypted.
Data Backup
We run daily backups of our databases and file storage, these backups are moved to a secure location off site. Each repository account has its own dedicated file storage location which is backed up nightly. The database is shared using a multi-tenant model (horizontal partitioning). All data inside the backups is AES256 encrypted.
Data Monitoring
We have real-time 24×7 monitoring & alerting at the application, server and network layers.
We have detailed security information available to all EA Composer customers on request.