At EnviroData Solutions, Inc., we provide Software as a Service (SaaS) solutions that empower businesses to protect their employees and maintain compliance with environmental, safety, health, and quality regulations. Data security is at the core of our operations, and we have implemented comprehensive security measures to safeguard our clients' information. For a deeper look into our security framework, visit our Trust Center and Security Scorecard.
ORGANIZATIONAL SECURITY
- Background Checks - All employees undergo background checks prior to employment.
- Endpoint Security - Employee devices are regularly patched and are equipped with anti-virus software and malware protection.
PHYSICAL SECURITY
- Workplaces - Workplaces are secured and locked when unattended to prevent unauthorized access.
- Data Centers - Data centers are ISO 27001 certified, reflecting their adherence to rigorous security protocols.
INFRASTRUCTURE SECURITY
- Network Protection - Firewalls are used to prevent unauthorized access to our servers, and client data is segregated into unique databases and application pools to protect sensitive data.
- Server Hardening - Servers are hardened by disabling unused ports and accounts as well as removal of default passwords and outdated users.
- Continuous Monitoring - Servers are actively monitored for malware, vulnerabilities, and suspicious activity through real-time logging and analysis.
- Web Application Security - A web application firewall (WAF) screens traffic for threats, blocking malicious bots and suspicious IPs.
DATA SECURITY
- Security By Design - Changes to our software solutions are reviewed for security risks at each stage of the development life-cycle.
- Data Isolation - Each client's data is stored in dedicated, separate databases to maintain confidentiality.
- In Transit Encryption - Data exchanged between clients and our servers is secured with strong encryption protocols.
- At Rest Encryption - Customer data is stored on servers that are encrypted at rest to prevent unauthorized access.
- Backup Encryption - Nightly backups are performed and kept in an encrypted state for added protection.
IDENTITY AND ACCESS CONTROL
- Single Sign-On (SSO) - We offer various SSO integration options for seamless authentication.
- Multi-Factor Authentication (MFA) - Our solutions support MFA, enhancing security and reducing the risk of unauthorized access.
OPERATIONAL SECURITY
- Backups - Client data is backed up daily, with encrypted and geo-redundant storage for disaster resilience.
- Business Continuity - EDS maintains a comprehensive business continuity program, ensuring minimal disruption in the event of a disaster.
VENDOR MANAGEMENT
- Selection - We carefully evaluate and select vendors based on strict security and compliance standards.
INCIDENT MANAGEMENT
- Breach Notification - In the event of a data breach, we follow strict internal procedures to promptly notify impacted clients and relevant regulatory authorities in accordance with legal requirements.
- Business Continuity & Disaster Recovery - EDS maintains and exercises a business continuity program to minimize disruptions to our clients should a disaster strike.
CONTACT US FOR ADDITIONAL INFORMATION
If you have questions or concerns about EnviroData Solutions, Inc.’s security practices, please contact our Legal Department (Click Here To Email Us) or write us at:
EnviroData Solutions, Inc.
1499 West 120th Avenue, Suite 110
Westminster, CO 80234
(720) 547-5102
https://www.ecesis.net/
