Information Security

Privacy Policy

Learn how we handle your personal data and protect your privacy.

View Document

Data Security Practices

Explore the safeguards we use to secure your data from unauthorized access.

Request Document

Compliance Certifications

Our adherence to industry standards for information security and compliance.

Request Document

Report Security Issues

If you identify a security vulnerability, please report it responsibly. Your findings help us maintain a secure and reliable platform.

[email protected]

We will acknowledge reports within 3 business days and address valid issues promptly.

Controls

Infrastructure Security

Production Database Encryption
Production Application Access Restricted
Production Database Access Restricted
View All Controls

Organizational Security

Production Anti-malware Technology Utilized
DBMS Authentication Configurations
MDM System Utilized
View All Controls

Security Practices at Sensfrx

We utilize multi-layered security strategies to protect your information.

Data Encryption

Data is encrypted both in transit and at rest to protect sensitive information.

Continuous Monitoring

Our systems are continuously monitored to detect and respond to threats swiftly.

Access Control

Strict access policies ensure that only authorized personnel can access sensitive data.

Compliance powered by

Frequently asked questions

Here are a few things you might be wondering about.

Still have questions?

Get in touch with our friendly team.

Get in touch

Frequently asked questions

Here are a few things you might be wondering about.

How does Sensfrx secure my data?

Sensfrx uses advanced encryption and multi-factor authentication to secure your data and prevent unauthorized access.

What compliance standards does Sensfrx meet?

We are compliant with industry standards such as ISO 27001 and GDPR to ensure your data's security and privacy.

How can I request a security or compliance document?

You can request a document by clicking on the "Request Document" button associated with each section above.

Control	Status
Production Database Encryption	Production databases are encrypted using Azure Key Vault encryption.
Production Application Access Restricted	Logical access provisioning to production that is ad-hoc or custom is approved by designated personnel.
Production Database Access Restricted	Employer and member data are stored in the production database and restricted to authorized personnel to protect from erasure or destruction.
Production Network Access Restricted	The company restricts privileged access to the production network to authorized users with a business need.
Authentication 2FA and Encryption Configurations	The company requires authentication to the "production network" to use unique usernames and passwords or authorized Secure Socket Shell (SSH) keys.
Remote Access MFA Enforced	A cloud-based platform with multi-factor authentication and encryption is utilized for remote access for the security and integrity of data passing over the public network.
Remote Access Encrypted Enforced	A cloud-based platform with multi-factor authentication and encryption is utilized to help ensure the security and integrity of data passing over public networks.
Azure Security Group (Inbound)	The company uses firewalls and configures them to prevent unauthorized access.
Data Backup and Recovery	Backup and recovery procedures are in place to ensure data is regularly backed up and can be restored when needed.
Firewalls Configured	Firewalls are configured to prevent unauthorized access to critical systems.
Intrusion Detection Systems	IDS are in place to monitor and alert on suspicious activity in the network.
Secure Network Segmentation	The network is segmented to isolate sensitive data from less secure areas.
Server Hardening Procedures	Servers are hardened according to best practices to reduce vulnerabilities.

Control

Status

Production Database Encryption

Production databases are encrypted using Azure Key Vault encryption.

Production Application Access Restricted

Logical access provisioning to production that is ad-hoc or custom is approved by designated personnel.

Production Database Access Restricted

Employer and member data are stored in the production database and restricted to authorized personnel to protect from erasure or destruction.

Production Network Access Restricted

The company restricts privileged access to the production network to authorized users with a business need.

Authentication 2FA and Encryption Configurations

The company requires authentication to the "production network" to use unique usernames and passwords or authorized Secure Socket Shell (SSH) keys.

Remote Access MFA Enforced

A cloud-based platform with multi-factor authentication and encryption is utilized for remote access for the security and integrity of data passing over the public network.

Remote Access Encrypted Enforced

A cloud-based platform with multi-factor authentication and encryption is utilized to help ensure the security and integrity of data passing over public networks.

Azure Security Group (Inbound)

The company uses firewalls and configures them to prevent unauthorized access.

Data Backup and Recovery

Backup and recovery procedures are in place to ensure data is regularly backed up and can be restored when needed.

Firewalls Configured

Firewalls are configured to prevent unauthorized access to critical systems.

Intrusion Detection Systems

IDS are in place to monitor and alert on suspicious activity in the network.

Secure Network Segmentation

The network is segmented to isolate sensitive data from less secure areas.

Server Hardening Procedures

Servers are hardened according to best practices to reduce vulnerabilities.

Control	Status
Data Encryption Utilized	The company's datastores housing sensitive customer data are encrypted at rest.
Control Self-Assessments Conducted	The company performs control self-assessments at least annually to gain assurance that controls are in place and operating effectively.

Our Commitment to Security and Trust

Privacy Policy

Data Security Practices

Compliance Certifications

Report Security Issues

Controls

Infrastructure Security

Organizational Security

Resources

Security Practices at Sensfrx

Data Encryption

Continuous Monitoring

Access Control

Frequently asked questions

Frequently asked questions

Control	Status
Production Anti-malware Technology Utilized	Antivirus software is configured to detect and prevent the execution and transmission of malicious data or files using machine learning technology.
DB Authentication Configurations	The in-scope systems are configured to authenticate users with a unique user account and enforce minimum password complexity requirements.
MDM System Utilized	The company has a mobile device management (MDM) system in place to centrally manage mobile devices supporting the service.