Security

Our customers across the globe trust us with their data security. We back ourselves up with robust data security and privacy practices that form an integral part of our product engineering and service delivery principles.

Fueling Knowledge bases for companies like

Behind the scenes

Document360 being a custodian of customers’ data, a multi-fold model of security architecture, robust product delivery and a highly resilient service platform, are the key tenets of its service delivery

Protecting your data

We protect your data by applying multi-tiered data security model, adhering to stringent data security practices and good data governance processes

Secure Product Build

Security by design is our mantra to ensure that every product build is secure and safe. Our product team focusses on end-to-end security in our product lifecycle

Highly Resilient Architecture

Our technical architecture is highly scalable, elastic and redundant to ensure that our servers are available to deliver services reliably without any downtime

Protecting
your data

We understand the value of data security. With our robust system of data safeguards, we allow you to focus on the data rather than on its security.

Perimeter Security

Routing rules hardened based on pre-established criteria for various permissible transactions across all resources.

Encryption

AES 256 bit encryption for data at Rest and HTTPS with TLS 1.2 encryption for data in transit.

Access Controls

Role-based access through IAM that enforces segregation of duties, two-factor authentication and end-to-end audit trails ensuring access is in accordance with security context.

DDoS Protection

Protection against Distributed Denial of Service (DDoS) attacks by defending common network-layer attacks through always-on traffic monitoring and real-time mitigation.

Malware

24-hour threat management protection against malware and man-in-the-middle threats.

Security updates

Runtime software are regularly updated to address newly discovered vulnerabilities.

Secure Product Build

Information security and data privacy requirements are baked into every release cycle and form part of the blueprint considerations of the product.

Product Roadmap

A product roadmap is defined and reviewed periodically by the Product Owner. Security fixes are prioritized and are bundled in the earliest possible sprint.

DevOps Team

Our DevOps sprints are powered by a multi-disciplinary team members including the Product Owner, Director of Engineering, Developers, and Quality Assurance.

Code Review

All changes are tested by the Quality Assurance team and criteria are established for performing code reviews, web vulnerability assessment, and advanced security tests.

Version Control

Source code is managed centrally with version controls and access restricted based on various teams that are assigned to specific sprints. Records are maintained for code changes and code check-ins and check-outs.

Quality Assurance

Builds are put through stringent functionality tests, performance tests, stability tests, and UX tests before the build is certified “Good to go”.

Segregation of Duties

Access to the production resources is restricted to limited set of users based on the job roles.

Highly Resilient Architecture

The architecture is built with resiliency in mind that ensure high availability for the product and data.

High Availability

We have multiple instances of our services running to ensuring high availability of our services for our customers.

Highly Scalable DNS

Route users to the best endpoint based on geo-proximity, latency, health, and other considerations.

Data Backup

Cloud snapshots are taken every day and retained, weekly and monthly, and the backups are available for 1 months for restoration.

Incident & Breach Management

Procedures are established for reporting incidents, and tracking it for timely communication, investigation, and resolution.

Azure CDN

We use Azure CDN to make sure our application and customer documentation are served with speed and ensure that they are served from the nearest node.

Disaster recovery

To provide an uninterrupted experience our infrastructure and storage are replicated in different geo-location. Independent security audits are carried out on regular basis

Found a security bug

Document360 understands that protection of customer data is a significant responsibility and requires the highest priority. We genuinely value the assistance of security researchers and any others in the security community to assist in keeping our systems secure. The responsible disclosure of security vulnerabilities helps us ensure the security and privacy of all our users. Please reach out to security@document360.com if you have found any potential vulnerability in our product.