Rannsolve recognises that the confidentiality, integrity and availability of information and data created, maintained and hosted by us are vital to the success of the business and privacy of our partners.

As a service provider/product, we understand the importance in providing clear information about our security practices, tools, resources and responsibilities within rannsolve so that our customers can feel confident in choosing us as a trusted provider.

This Security Posture highlights high-level details about our steps to identify and mitigate risks, implement best practices, and continuously develop ways to improve.

Founded in 2016

|
|

Controls (8)

Here are the controls implemented at Rannsolve Trust Center to ensure compliance, as a part of our security program.

Data Security (4)

Access Monitoring

Entity enforces the principle of least privilege, ensuring that access to sensitive customer data is restricted to authorized personnel based on their specific job roles and business necessity.

Secure Data Disposal

Entity maintains formal procedures for the secure deletion of customer data upon request or contract termination, ensuring that information is rendered unrecoverable across all production and backup systems.

Physical Security

Entity relies on sub-processor data centers that enforce multi-layered security protocols, including 24/7 on-site security personnel, biometric authentication, and high-resolution video surveillance to prevent unauthorized entry.

Backups Enabled

Entity performs automated, full, and incremental backups of all critical system data on a regular schedule, ensuring that current information is always available for restoration.

Network Security (4)

Vulnerability Scanning

Entity conducts regular, automated internal and external network scans to identify potential security weaknesses and misconfigurations, ensuring timely remediation of vulnerabilities before they can be exploited.

IDS/IPS

The entity’s infrastructure includes automated systems that monitor network traffic for malicious activity or policy violations and take proactive steps to block identified threats in real-time.

Firewall

Entity utilizes stateful firewalls and cloud-native security groups to monitor and control incoming and outgoing network traffic based on predetermined security rules, ensuring only authorized traffic reaches critical infrastructure.

Comprehensive Security Auditing

The entity monitors and records all critical system activities and user actions in real-time. These logs are stored securely in a central location, protected against tampering, and reviewed regularly to detect, investigate, and respond to potential security incidents.

Create your own Trust Center | Powered by

Sprinto Logo