Security policy
Seb Hefel avatar
Written by Seb Hefel
Updated over a week ago

We’re committed to protecting the content and data from our clients.

Communication

All user data is transported securely, as all traffic is encrypted in transit via SSL. We use 256-bit SSL/TLS.1.2 encryption, utilising RSA algorithms.

Data Centre Security

Our hosting environment is fully-redundant with disaster recovery procedures. Our cloud hosting providers maintain multiple certifications for its data centers, including ISO 27001 compliance, PCI certification, and SOC. For details about their certification and compliance, please visit the Amazon AWS security site.

EU Hosted Infrastructure

The Innform Platform infrastructure is hosted on servers based in the European Union. This allows us to meet specific regulatory and compliance requirements of organisations in Europe. Our data centre provider AWS is located in the United Kingdom and Germany. AWS maintains multiple certifications, including SOC 1, SOC 2, SOC 3 and ISO27001. In addition all personal data is encrypted both in transit and at rest using strong encryption.

Credit Cards

Innform does not store any credit card information. We work with Stripe for credit card processing which allows us to leverage AES-256 encryption at rest, with PCI Service Provider Level 1 standards in the storage and handling of credit card information. This is the highest level of certification available to the payments industry.

Did this answer your question?