Timecloud Security Measures
System and Network Security
At Timecloud, the security of our systems and networks is a top priority. To ensure the highest protection level, we conduct regular penetration tests conducted by Quantum Security, a reputable cybersecurity firm. Our consultants are certified in OSCP, SABSA, CISA, CISSP, and PCI-QSA, guaranteeing a thorough evaluation of our entire product suite.
We employ Automated Threat Detection through AWS Guard Duty, Web Application Firewalls, and robust DDoS protection measures to fortify our defences. Continuous monitoring and assessment against industry standards, including AWS Foundational Security Best Practices (FSBP), CIS, PCI DSS, and NIST, help us maintain a vigilant stance against potential threats. All our servers undergo regular updates with the latest patches and security fixes.
Data Transfer
Your data's security during transfer is of utmost importance to us. We exclusively use HTTPS (TLS 1.2+) for all data transfers and routinely rotate our digital certificates, ensuring the highest level of encryption and authentication.
Data Storage
We take meticulous measures to safeguard your data at rest. All stored data is encrypted, providing an additional layer of protection. Customer data is hosted within the secure confines of AWS us-west data centres. Regular backups are performed and stored in different data centre regions to ensure redundancy and expedited recovery. Our backup retention strategy includes daily, weekly, and yearly intervals.
IT Practices
We adhere to the principle of Least Privilege when accessing customer data, ensuring that only authorized personnel have the necessary permissions. All IT equipment is kept up to date with the latest security patches. We strictly follow maintenance schedules recommended by relevant software vendors to guarantee system integrity.
To enhance authentication security, we have implemented Multi-Factor Authentication (MFA) and employ Single Sign-On (SSO) across multiple services, streamlining access management and reinforcing overall security.
Commitment to Excellence in Security
These comprehensive security practices underscore our commitment to safeguarding your data and ensuring the reliability and integrity of Timecloud services. We prioritize transparency and accountability, continuously adapting and evolving our security measures to address emerging threats. Your trust in Timecloud is essential, and we are dedicated to upholding the highest security standards in every aspect of our operations.