Security & Compliance
At DataOpus we build cybersecurity and compliance into our products, so our partners and customers have confidence in using them. We are committed to implementing robust security measures and adhering to industry-leading standards to protect your data and ensure regulatory compliance.
At DataOpus we employ a multi-layered approach to data security to safeguard our customers' information
-
- Encryption: All data is encrypted both in transit and at rest using industry-standard encryption algorithms to prevent unauthorized access.
-
- Access Controls: Role-based access controls are enforced to limit access to confidential information only to authorized personnel with appropriate permissions.
- Regular Security Audits: We conduct regular security audits and assessments to identify vulnerabilities and ensure compliance with industry standards.
Safe & Secure Software
Within our software development lifecycle, engineers incorporate OWASP’s industry recommended practices and standards via Static Code Analysis from SonarLint and SonarSource. All 3 rd party code / libraries require the same level of security validation. Software is never released with known vulnerabilities, weaknesses, or flaws.
Resilient Data Platforms
DataOpus practices dogfooding by utilizing our own products to validate that data aspects of our solutions do not have known vulnerabilities, weaknesses, flaws, or smells.
Hardened Cloud
At DataOpus, we are constantly seeking to harden our cloud infrastructure. By employing the Microsoft Azure Policy capability, our entire cloud infrastructure is actively managed so we can enforce organization standards that meet industry and government standards.
Throughout 2024 and 2025, DataOpus is dedicated to increasing the depth and breadth of our internal security practices by adding relevant compliance and standards. Our cloud instance currently aligns to the following compliances & standards.
Privacy policy
For more information about how we collect, use, and protect customer data, please refer to our privacy policy.
Incident response plan
In the event of a security breach or data incident, we have a comprehensive incident response approach in place to minimize the impact on our customers and partners. Our team is trained to respond swiftly and effectively to address any security incidents and mitigate risks.
Customer trust and transparency
We believe in transparency and are committed to earning and maintaining the trust of our customers. If you have any questions or concerns about our security and compliance practices, please don’t hesitate to reach out to us.
Partnerships and third-party services
We carefully vet and select third-party service providers who share our commitment to security and compliance. Our partnerships with trusted vendors help enhance our security posture and ensure compliance with regulatory requirements.
Continuous improvement
We are dedicated to continuously improving our security and compliance practices to adapt to evolving threats and regulatory changes. Our team undergoes regular training, and we regularly review and update our policies and procedures to enhance security and compliance effectiveness.
Sub-processors
DataOpus engages third-party sub-processors to help us provide services to our customers. As a condition of permitting a sub-processor to process personal data, DataOpus will enter into a written agreement with each sub-processor containing data protection obligations at least as protective as the technical and organizational measures DataOpus has put into place to protect customer personal data from accidental or unlawful destruction, loss, alteration, or unauthorized disclosure or access.
