Security of the Venzeo™ system

Venzeo™ web application is protected with 256-bit SSL certificate.

Login verification meets latest industry standards:

1. Passwordless login (we do not store any user's password)

2. Google login

3. Microsoft and Office 365 login

Data Storage Security

• Data Storage Security  PCI-DSS, HIPAA/HITECH, FedRAMP, EU Data Protection Directive, and FISMA provided by AWS;

• Data are encrypted at rest.

• Located in Frankfurt, Germany and Ireland. On request we can allocate your data within UK, US or any other AWS datacenter.

Data at Transit

• Data are encrypted at transit using SSL encryption. Our SSL certificates are being verified every 5 minutes.

Security tests of Venzeo™ system:

• Regular OWASP tests are performed.
  

• SSL/TLS Vulnerability & Configuration Scan
  

• TLS Version test
  

• Server Signature Test
  

• X-Content-Type-Options header

• Secure Headers Test
  

• HSTS (HTTP Strict Transport Security) Test
  

• X-XSS-Protection Header Test
  

• DNSSEC Test
  

• Test if a website is considered unsafe by Google
  

• JavaScript Libraries Vulnerability Scanner
  

Email Communication protected with

• SPF & DKIM Record (See test results)

• DMARC Record (Test venzeo.com domain here)

Cloud Computers

• It takes us 15 seconds to replace broken hardware.

• AWS cloud provider employs thousands of security engineers and follow.

Audit Trail

• Venzeo™ Mobile App and Venzeo™ Web Application is keeping audit trail to verify user's activity and protect your business.