Security

Data Encryption

Colectidea encrypts data in transit using HTTPS and logically isolates customer data. Additionally, several components also encrypt their data at rest:

• User Authentication
• Information Storage
• Information Storage (Images)
• Information Processing
• Sending notifications (push)
• Automatic performance and failure reporting

Compliance with Security Standards

Colectidea components comply with major security and privacy standards.

Internal Security Practices

To keep personal data secure, extensive security measures are employed:

• All employees are trained in information security.
• By default, access is restricted to all employees of our company, only certain predefined roles have access (e.g., customer service and technical support).
• Employee access to systems containing personal data is logged.
• Access to personal data is only allowed to employees who log in with an account with two-factor authentication.

End-User Security

Certain security-related activities are the responsibility of the end-user:

• Adding users
• Deleting users
• Assigning roles and permissions

We recommend adding complementary security practices for these activities.