The Ipendo security team, headed by CISO (Chief Information Security Officer), is committed to providing everything you need to keep your data safe. Ipendo Platform™ security is built on a solid architecture including several authentication and authorization levels. The security setup is role-based and supports advanced user rights management.

Customer data is isolated to a customer specific database by default. This solution is robust and safe as it focuses on the isolation of data to maintain integrity and privacy. In addition, all communications between Ipendo Platform™ and an end user’s PC are encrypted using SSL (secured Socket Layer). Ipendo security policy also includes a Disaster Recovery Strategy, which defines how data can be recovered and how long it takes to recover customer data when necessary.

Proactive security checks

Ipendo security policy includes an annual security assessment test provided by an external independent security partner. These tests are very extensive and examine the Ipendo Platform™ for all kinds of possible threat scenarios. Any threats found are immediately analyzed and handled. In addition, Ipendo uses automated intrusion detection systems (IDS) running 24-7 to capture new security threat signatures worldwide and assess the platform’s vulnerability, leading to prompt action to deal with new threats that arise before you are exposed.

Second Authentication

Ipendo’s standard security solution is highly robust and covers all necessary aspects of data protection. We also offer additional security levels that can be used in different business scenarios - either separately or in combination.

• OTP (One Time Password) is an optional security feature issuing session passwords that are configurable per customer portfolio, which can be used for temporary users or as a second layer of authentication.
• IP Range is an optional security feature configurable per customer portfolio that can be used as a second authentication level. Users need to be on your internal network to access Ipendo Platform™. This feature makes SaaS work like an in-house solution, even though the service is hosted on Ipendo servers. This setup makes it easier to get an acceptance from your internal IT security team with a security policy that prohibits the use of SaaS for sensitive data or general usage.

Words: Charly Nijm