Security Compliance at rezzervi
Security Compliance at rezzervi
Everyone at rezzervi (Info Technology Supply Ltd trading as rezzervi, a company incorporated in England and Wales under number 2230502 whose registered office is at 2 Hobbs House, Harrovian Business Village, Bessborough Road, Harrow, HA1 3EX, United Kingdom and its authorised resellers who may contract with a customer) takes compliance with obligations in data protection and other legislation relating to data security seriously and understands its significance both to customers and partners. For this reason, rezzervi have obtained independent third-party auditor certification for ISO 27001.
This page sets out rezzervi security measures and should be read in conjunction with rezzervi Privacy Policy and related documents on the rezzervi website including Data Privacy & Security FAQs and Data Privacy at rezzervi documents.
Security Best Practices at rezzervi
At rezzervi we take great pride in our information security program and are dedicated to its continual improvement.
User Account Security
Product Access Control
A subset of rezzervi's personnel has access to the service and to customer data via managed interfaces. The intention of providing access to a subset of personnel is to provide effective customer support, troubleshoot potential problems, detect, and respond to security incidents and implement data security.
Encryption
rezzervi uses 256-bit AES encryption at rest in addition to securing network communication with TLS 1.2 for encrypting data in transit. Any passwords stored are HASHED one way.
Change Management
- Peer code reviews: every change of rezzervi is peer reviewed whether it’s a new feature or bug fix. Security reviews are performed as appropriate.
- Regular code audits for security.
- Robust unit testing.
- Regular penetration testing.
Cloud Security
rezzervi uses Microsoft Azure as its cloud service provider and leverages Azure's security and compliance controls for data centre physical security and cloud infrastructure. Further resources can be found on the website.
Monitoring & Logging
Availability
The rezzervi service utilises automatic Azure availability services, rezzervi maintains a Status page.
Logging
rezzervi maintains a comprehensive log of all workflow actions. Actions are logged internally for troubleshooting, support, and planning purposes.
Vulnerability Management
Threat Detection
rezzervi has enabled threat detection software and enforces continual threat modelling exercises to identify and plan for any vulnerabilities in our environment.
External Penetration Testing
rezzervi undergoes an external penetration test by an independent third party on a monthly basis, new vulnerabilities are scanned daily.
rezzervi regularly updates its security measures. Users should make regular reference to this page for the latest position as this Security Compliance summary is updated from time to time.
