ISO 27001 and SOC 2 Certified
Our web hosts (OVH and AWS) are certified by leading third-party cybersecurity auditors. See here the full list of their certifications :
OVH
AWS
OVH
AWS
Encryption In Transit And At Rest
Both idle and active data is encrypted over public networks and in our databases, using salted SHA-256.
Database Security
Databases are built with multi-layer security including ciphered passwords, 2FA, intrusion detection systems, and VPC with strict firewall settings.
Integrations Security
Integrated SaaS Services are authorized securely with OAuth2 and credentials are not stored for those services.
Replication
Our IT infrastructure is replicated between 2 web hosts (OVH and AWS) ensuring zero downtime.
Immutability
Critical pieces of Vloum's application are hosted on an immutable server.
Penetration Testing
Annually, a certified third party cybersecurity company performs a black and grey-box pentest against the applicative layer and the IT infrastructure.
Internal Audits
Audits are carried out, twice a year, on access control, risk, information security, and HR procedures.
Data Recovery
Automated data backup are completed several times a day, with a maximum 24-hour RTO and RPO.
