The Trust Center
Trust is the basis of everything we do
Companies rely on 蘑菇视频 to:
- Transform IT data into actionable insights so they can deliver seamless, secure digital experiences; and
- Provide fast, agile, secure acceleration of any app, over any network, to users wherever they are.
How We Protect Your Business
Four Pillars of Trust
蘑菇视频 leverages a “Four Pillars” approach to deliver secure and dependable products and services.
Security
蘑菇视频 is continually refining its security strategy and framework?to reflect our organization’s specific security risks. Maintaining a robust security-first culture is key to protecting the integrity of our products and services, inspiring customer confidence, and furthering our business relationships.
Privacy
蘑菇视频 knows that customers care about how personal data is used and shared, and 蘑菇视频 takes privacy very seriously. 蘑菇视频’s privacy and risk management framework is designed to meet 蘑菇视频’s obligations under applicable global privacy laws , including the General Data Protection Regulation (GDPR).
Compliance
蘑菇视频 undergoes third-party audits and obtains product certifications to provide our customers with independent, third-party assurances.
Reliability
蘑菇视频 designs our Cloud Service offerings to deliver secure, highly available solutions, 24×7, around the world.?蘑菇视频 Support offers 24x7x365 issue resolution, a global logistics network, and robust online resources for all products.
Security
蘑菇视频’s security strategy and framework leverages industry standard best practices and standards. Our security program is led by 蘑菇视频’s Chief Information Officer (“CISO”) with the involvement of key cross-functional stakeholders to enable a holistic approach to security management. Key features of 蘑菇视频’s security program include:
Security Policies
蘑菇视频 maintains a comprehensive set of security policies. More information regarding the security requirements and measures used to establish and enforce 蘑菇视频’s corporate security program can be found?here.
Security Measures
The technical and organizational measures built into specific offerings can be found?here.
Security Training & Awareness
All 蘑菇视频 personnel are required to undergo annual security training and participate in ongoing security awareness initiatives.
Data Center Security
蘑菇视频 does not operate any of its own data centers. We leverage industry-leading third- party cloud infrastructure providers and requires all such providers to have?a SOC 2 Type II annual audit and ISO 27001 certification, or industry recognized equivalent frameworks.
Testing & Verification
Engineering teams regularly review our code, infrastructure, and supporting systems to ensure we have the correct people, processes, and controls to protect product development and customer data.
Security Incident Response
Our security incident response team acts promptly to respond, investigate, and remediate security issues when they are detected..
Privacy
蘑菇视频 knows that customers care about how your personal data is used and shared, and 蘑菇视频 takes privacy very seriously. The Privacy page of 蘑菇视频’s Trust Center provides a centralized source of information about 蘑菇视频’s privacy practices.
Privacy Resources
When 蘑菇视频 Acts as a Controller
- 搁颈惫别谤产别诲’蝉?General Privacy Policy?applies to personal data collected through 蘑菇视频’s websites, feedback, and surveys, the sales and contracting process, and both online and offline sales and marketing activities.
- 搁颈惫别谤产别诲’蝉?CCPA Notice?supplements 蘑菇视频’s General Privacy Policy and describes the rights of California residents under the California Consumer Privacy Act of 2018 (“CCPA”).
- The?EU Applicant and Candidate Privacy Policy?applies to 蘑菇视频’s collection and processing of personal data relating to EU job applicants and candidates during the application and recruitment process.
- The?California Applicant Policy?applies to 蘑菇视频 job applicants and candidates who are residents of California.
When 蘑菇视频 Acts as a Processor
- 蘑菇视频 offers a?Data Processing Addendum?(“DPA”) that sets out the legal framework under which 蘑菇视频 processes personal data. 蘑菇视频’s DPA includes key GDPR-related assurances and incorporates the Standard Contractual Clauses approved by the European Commission to address the transfer of personal data outside of the EEA.
- 搁颈惫别谤产别诲’蝉?Data Transfer Impact Assessment Guide?assists customers in conducting data transfer impact assessments.
- 蘑菇视频 performs due diligence reviews to assess the privacy and security practices of our subprocessors, who are required to enter into appropriate security, confidentiality and privacy contract terms based on the risks presented by the assessment, including data processing terms as required by applicable law. A list of 蘑菇视频’s current subprocessors can be found?here.
- Additional documentation consisting of “Privacy Data Sheets” and “Processing Details” describing 蘑菇视频’s processing of personal data for specific products and services can be found?here.
We value the trust you place in 蘑菇视频. We are committed to providing our customers and partners with secure solutions utilizing state of the art technologies to safeguard your information.
蘑菇视频’s security and privacy framework is governed by the ISO/IEC 27001:2022 Information Security Standard and the ISO/IEC 27701:2019 Privacy Information Management Standard. 蘑菇视频 has achieved internationally recognized ISO/IEC 27001:2022 and ISO/IEC 27701:2019 certifications. In addition, a subset of 蘑菇视频 solutions has also undergone Statement on Standards for Attestation Engagements (SSAE) 18 System and Organization Controls (SOC) audits. To maintain these certifications, 蘑菇视频 undergoes comprehensive annual audits from an independent third-party assessment organization. These security assessors verify 蘑菇视频’s compliance in over 140 security and data protection areas within 14 different security categories including access control, incident response, security training, system integrity, identification and authentication, contingency planning, etc.
ISO 27001:2022
Established by the International Organization for Standardization (ISO), the prestigious and internationally recognized ISO 27001 standard requires the certification of an organization’s information security management controls for areas such as data security and business continuity. 蘑菇视频’s Information Security and Privacy Management System (ISPMS) has been inspected and certified by Coalfire, an accredited certifying body. The 蘑菇视频 solutions that are ISO 27001 certified include 蘑菇视频 IQ and 蘑菇视频 Aternity Digital Experience Management, including Aternity Employee Experience, Application Performance Management (APM), and NPM+.
蘑菇视频’s ISO 27001 certificate is? available here.
ISO 27701:2019
Established by the International Organization for Standardization (ISO), the prestigious and internationally recognized ISO 27701 standard requires the certification of an organization’s management controls for privacy.? 蘑菇视频’s Information Security and Privacy Management System (ISPMS) has been inspected and certified by Coalfire, an accredited certifying body.? The 蘑菇视频 solutions that are ISO-certified include 蘑菇视频 IQ and 蘑菇视频 Aternity Digital Experience Management, including Aternity Employee Experience, Application Performance Management (APM), and NPM+.
蘑菇视频’s ISO 27701 certificate is available here.
SSAE-18 SOC 2 Type II and SOC 3
蘑菇视频 publishes a Service Organization Controls 3 (SOC 3) report for the 蘑菇视频 IQ and 蘑菇视频 Aternity Digital Experience Management Platforms. This SOC 3 report is a publicly available summary of the detailed SOC 2 Type II report.? The SOC 3 report provides assurance that 蘑菇视频’s internal controls have been verified to achieve the AICPA’s Trust Services Criteria for data security and availability.
The detailed SOC 2 Type II report may be requested from your account executive.
Click here for the 蘑菇视频 IQ and 蘑菇视频 Aternity SOC 3 report.
Australia IRAP
The ?(IRAP) provides a comprehensive process for the independent assessment of a system’s security against the Australian Government ?(ISM) requirements. The IRAP goal is to maximize the security of Australian federal, state, and local government data by focusing on the information and communications technology (ICT) infrastructure intended for data storage, processing, and communication.
In May 2024, CyberCX, a third-party assessor, completed the Cloud Security Assessment of the Australian regions for the 蘑菇视频 Aternity EUEM Cloud Service. The assessment was conducted in-line with the Australian Cyber Security Centre’s (ACSC) Cloud Security Assessment and Authorisation Framework, Phase 1. The assessment was conducted using the Australian Government Information Security Manual (ISM) March 2024 version. The Aternity EUEM Cloud Service was assessed at the PROTECTED information classification level. A copy of the assessment may be requested from your account executive.
Penetration Test Summary
蘑菇视频 also contracts with Coalfire, an industry-leading penetration testing firm, to perform rigorous security testing of its 蘑菇视频 IQ and 蘑菇视频 Aternity solutions. A copy of the most recent penetration test may be requested from your account executive.
蘑菇视频 uses select forms of Artificial Intelligence (“AI”) in certain products.
蘑菇视频 IQ
For information about AI in 蘑菇视频 IQ, click here.
蘑菇视频 IQ Assist
For information about AI in 蘑菇视频 IQ Assist, click here.
Selected Country/Language: English