.png)
Top-tier data security and
compliance assurance.
We acknowledge ISO standards as vital for customer risk programs, regularly updating for new certifications.
Certified with ISO/IEC standards
Information Security Management System
Information Technology Management Systems
Information Technology - Security Techniques
Information Technology - Security Techniques
.png)
Cloud-Hosted SaaS
The AuditorsDesk platform is hosted on Amazon Web Services (AWS) cloud infrastructure.
Trusted
AWS is the gold standard for thousands of companies worldwide who rely on their extensive and integrated native security controls.
Browser-Based Web Application
All functionality is accessible from a web browser and any modern browser is compatible.
Redundancy
Servers are replicated and load-balanced across data centers and regions.
Physical Security
AWS data centers use biometric entry authentication and have 24/7 monitoring.
.png)
Access Controls
Configure granular access policies and role-based permissions.
Single Sign-On
Use industry standard SAML 2.0 to integrate your corporate directory or identity providers such as Active Directory, OneLogin, Okta, and many others.
Strong Authentication
Customize password strength requirements, password reuse policies, and failed login attempt limits.
Two-Factor Authentication
Require users to authenticate with phone-based one-time passwords (OTP) as a second factor.
IP Restrictions
Limit what networks can access the AuditorsDesk application.
.png)
Data Protection
All customer data is encrypted at rest and in transit.
Transport Encryption
Strong end-to-end TLS 1.2 encryption protects customer data wherever it is transferred.
Storage Encryption
All customer files, databases, and backups are AES-256 bit encrypted before being written to permanent disk storage.
Data Integrity
Your data is protected from loss, manipulation, or corruption by cryptographic hashing controls that enforce versioning and provide secure transactional capabilities.
Secure Deletion
NIST-compliant data sanitization procedures are employed to securely delete data that has reached the end of its useful life.
.png)
Comprehensive Audit Trails
Visibility and monitoring at all levels.
Strictly Monitored
All platform components are closely monitored to ensure performance, availability, and security.
Audit Logs
Every data change made in the system is recorded against the authenticated user.
Login History
Every successful or failed attempt to access your AuditorsDesk instance is recorded and viewable.
.png)
Software Security
AuditorsDesk software is developed in accordance with the highest security standards.
Continuous Software Updates
Product upgrades that contain new security enhancements as well as the latest software updates are automatically applied.
Thorough Testing
Every product update is subject to stringent quality and security assurance testing before release.
Third-Party Verified
AuditorsDesk platform security is regularly assessed by third-party penetration testers and security assessors.
Third-Party Vulnerability Disclosures
AuditorsDesk is committed to protecting its customers and will promptly evaluate and address any reported vulnerabilities.
.png)
Resiliency and Availability
Engineered for Maximum Uptime and Data Access
Real-Time Backups
Our system performs continuous, real-time backups, ensuring data recovery down to the second
Daily Backups
We conduct encrypted full database backups daily, storing them in secure, redundant, and versioned S3 storage.
Resiliency and Redundancy
We guarantee uptime through built-in redundancies across regional, datacenter, hardware, container, and data levels.
Export Everything
All data and files in AuditorsDesk can be exported in common formats, including CSV.
Additional Support
Client-Controlled Data Storage
For added flexibility and control, clients have the option to store data on their own servers. Choose the solution that aligns with your organization's security policies and preferences.
Ample Data Space
AuditorsDesk provides a generous 10 GB of data space per user per month on AWS, ensuring sufficient capacity for audit documentation and storage needs.
