Security Hub
Anecdotes Security & Compliance Posture
Our security practices are based on industry-leading standards and are audited annually. Our security framework includes policies and procedures, Application & Data Security, Cloud and Infrastructure security, Endpoint security & Incident response.
Below, we detail the steps and procedures we take to keep our data, and that of our customers, safe and secure at all times.
.svg)
Application & Data Security
.svg){kind=icon}
Penetration Testing
We conduct penetration tests using external vendors at least once every 12 months to identify and address vulnerabilities.
Attack Prevention
We utilize Anti-DDoS protection and a Web Application Firewall (WAF) to safeguard against malicious attacks.
Data In Transit
All traffic transferred to Anecdotes is encrypted over https using TLS 1.2 and above, ensuring data integrity and privacy.
Data At Rest
Data is encrypted in our databases using AES 256-bit encryption by default, providing robust protection for stored information.
End-Point Security
Malware Protection
All devices are fully protected by our endpoint detection and response platform, offering real-time threat detection and remediation.
Mobile Device Management
Devices are fully managed, including security patch management, policies, and other best practices to ensure comprehensive protection.
Cloud Security
.svg){kind=icon}
Infrastructure Compliance
We use multi-layered controls to protect our infrastructure, constantly monitoring and improving our systems to meet growing security demands. We rely on Google Cloud Platform (GCP), a highly-regulated and compliant data center that meets stringent regional and international certification requirements.
Asset Management and Ownership
Access to production infrastructure is limited to the minimum number of individuals, based on a least-privilege and need-to-know basis, ensuring only authorized personnel can access sensitive data.
General
Hiring
The Anecdotes’ screening process involves comprehensive background checks and personal interviews conducted by HR hiring managers. Where applicable, additional background checks are performed in accordance with local laws.
Security Training
New employees undergo a rigorous onboarding process that includes detailed explanations of security guidelines, expectations, and code of conduct. All Anecdotes employees participate in annual security awareness training to ensure they remain informed about the latest security practices and threats.
Our Commitment to Trust
As a leading Security Compliance provider, we understand that working in a cloud-based environment may raise concerns about the confidentiality and protection of sensitive data. Anecdotes' security mechanisms protect all network and application components of our platform. Our transparency in security policies and processes enables brands to trust us with their most confidential data.
This trust is the foundation on which our customers leverage the business benefits of our SaaS solution.
To learn more about the measures we take to maintain a strong foundation of trust and security, please contact us at: [email protected]
Frequently Asked Questions
Have questions? We’ve got answers. If you can’t find what you're looking for, feel free to get in touch.
If you have any questions that haven’t been answered, please feel free to reach out to us. Security is at the core of everything we do and we’re super happy to share any relevant information regarding our security practices and philosophy.
.svg)
