{"id":1996,"date":"2018-06-12T14:57:49","date_gmt":"2018-06-12T12:57:49","guid":{"rendered":"http:\/\/wwwtest.tradecloud1.com\/?page_id=1996"},"modified":"2018-07-02T13:52:57","modified_gmt":"2018-07-02T11:52:57","slug":"security-policy","status":"publish","type":"page","link":"https:\/\/tradecloud.hdnk.nl\/en\/contact\/security-policy\/","title":{"rendered":"Security Policy"},"content":{"rendered":"<div class=\"fusion-fullwidth fullwidth-box fusion-builder-row-1 nonhundred-percent-fullwidth non-hundred-percent-height-scrolling\" style=\"--awb-border-radius-top-left:0px;--awb-border-radius-top-right:0px;--awb-border-radius-bottom-right:0px;--awb-border-radius-bottom-left:0px;--awb-flex-wrap:wrap;\" ><div class=\"fusion-builder-row fusion-row\"><div class=\"fusion-layout-column fusion_builder_column fusion-builder-column-0 fusion_builder_column_1_6 1_6 fusion-one-sixth fusion-column-first\" style=\"--awb-bg-size:cover;width:16.666666666667%;width:calc(16.666666666667% - ( ( 4% + 4% ) * 0.16666666666667 ) );margin-right: 4%;\"><div class=\"fusion-column-wrapper fusion-flex-column-wrapper-legacy\"><div class=\"fusion-clearfix\"><\/div><\/div><\/div><div class=\"fusion-layout-column fusion_builder_column fusion-builder-column-1 fusion_builder_column_2_3 2_3 fusion-two-third\" style=\"--awb-bg-size:cover;width:66.666666666667%;width:calc(66.666666666667% - ( ( 4% + 4% ) * 0.66666666666667 ) );margin-right: 4%;\"><div class=\"fusion-column-wrapper fusion-flex-column-wrapper-legacy\"><div class=\"fusion-text fusion-text-1\"><p>At Tradecloud, trust is our #1 value and we take the protection of our customers&#8217; data very seriously.<\/p>\n<p>The Tradecloud security team acknowledges the valuable role that independent security researchers play in internet security. As a result, we encourage responsible reporting of any vulnerabilities that may be found in our site or applications. Tradecloud is committed to working with security researchers to verify and address any potential vulnerabilities that are reported to us.<\/p>\n<p>Tradecloud maintains a comprehensive set of compliance certifications and attestations to validate our #1 value of trust.<\/p>\n<p>Tradecloud is dedicated to helping our customers be more secure when accessing our service. With the evolving threat landscape, we strongly encourage customers take action to help prevent unauthorized access to their Tradecloud environment.<\/p>\n<p><strong>GDPR<\/strong><\/p>\n<p>On May 25, 2018, a new privacy law called the General Data Protection Regulation (GDPR) has taken effect in the European Union (EU). The GDPR expands the privacy rights of EU individuals and places new obligations on all organizations that market, track, or handle EU personal data. Tradecloud is committed to helping our customers comply with the GDPR through our robust privacy and security protections.<\/p>\n<\/div><div class=\"fusion-text fusion-text-2\"><p><strong>General<\/strong><\/p>\n<ul>\n<li>All data is in the EU<\/li>\n<li>GDPR compliant per 25\/5\/2018<\/li>\n<\/ul>\n<p><strong>Datacenters<\/strong><\/p>\n<ul>\n<li>Digital Ocean and Packet<\/li>\n<li>The AMS2 facility is ISO27001:2005 and ISO9001 certified.<\/li>\n<li>The AMS3 facility is ISO9001, ISO27001, ISO14001, ISO50001 and SSAE16 Type II certified<\/li>\n<li><a href=\"https:\/\/www.digitalocean.com\/help\/policy\">https:\/\/www.digitalocean.com\/help\/policy<\/a><\/li>\n<li><a href=\"https:\/\/www.packet.net\/locations\/amsterdam\/\">https:\/\/www.packet.net\/locations\/amsterdam<\/a><\/li>\n<\/ul>\n<p><strong>Encryption<\/strong><\/p>\n<ul>\n<li>HTTP over SSL for the portal<\/li>\n<li>Plain password over HTTP over SSL for the portal<\/li>\n<li>AES 256 for ZMQ messages for the connector<\/li>\n<li>A Key per tenant for authentication<\/li>\n<\/ul>\n<p><strong>Infrastructure<\/strong><\/p>\n<ul>\n<li>OS: Ubuntu<\/li>\n<li>Integration: REST API<\/li>\n<li>Application: back-end: Scala, Akka &#8211; portal: Javascript, AngularJS &#8211; Connector: C#, .NET<\/li>\n<li>Database: Mongo 3 &amp; Cassandra<\/li>\n<li>Search: Elasticsearch<\/li>\n<li>Messaging: Kafka<\/li>\n<\/ul>\n<p><strong>On a technical level access to data is protected by:\u00a0<\/strong><\/p>\n<div>\n<div>\n<ul>\n<li>Restricted datacenter access only by cloud provider personnel<\/li>\n<li>Restricted cloud provider access by using two factor authentication<\/li>\n<li>Private cloud using firewalls on all servers<\/li>\n<li>\n<div>Database and search servers isolated from application servers<\/div>\n<\/li>\n<li>Restricted server access from Tradecloud offices only<\/li>\n<li>Restricted server access by SSH and public\/private key authentication only<\/li>\n<li>Centralized monitoring, logging and alerting of server activities<\/li>\n<li>Automated nightly security updates<\/li>\n<li>Automated encrypted backups on two locations<\/li>\n<li>User passwords are securely hashed with a salt<\/li>\n<li>SSL connections verified A-grade by Qualys SSL Labs<\/li>\n<\/ul>\n<\/div>\n<\/div>\n<div><strong>On a functional level access to data is protected by:<\/strong><\/div>\n<ul>\n<li>User authentication<\/li>\n<li>User authorization based on roles and his\/her company<\/li>\n<li>All data, like an order, has a buyer and\/or supplier identifier<\/li>\n<\/ul>\n<\/div><div class=\"fusion-clearfix\"><\/div><\/div><\/div><div class=\"fusion-layout-column fusion_builder_column fusion-builder-column-2 fusion_builder_column_1_6 1_6 fusion-one-sixth fusion-column-last\" style=\"--awb-bg-size:cover;width:16.666666666667%;width:calc(16.666666666667% - ( ( 4% + 4% ) * 0.16666666666667 ) );\"><div class=\"fusion-column-wrapper fusion-flex-column-wrapper-legacy\"><div class=\"fusion-clearfix\"><\/div><\/div><\/div><\/div><\/div>\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":7,"featured_media":0,"parent":2104,"menu_order":4,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-1996","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/tradecloud.hdnk.nl\/en\/wp-json\/wp\/v2\/pages\/1996","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tradecloud.hdnk.nl\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/tradecloud.hdnk.nl\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/tradecloud.hdnk.nl\/en\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/tradecloud.hdnk.nl\/en\/wp-json\/wp\/v2\/comments?post=1996"}],"version-history":[{"count":6,"href":"https:\/\/tradecloud.hdnk.nl\/en\/wp-json\/wp\/v2\/pages\/1996\/revisions"}],"predecessor-version":[{"id":2294,"href":"https:\/\/tradecloud.hdnk.nl\/en\/wp-json\/wp\/v2\/pages\/1996\/revisions\/2294"}],"up":[{"embeddable":true,"href":"https:\/\/tradecloud.hdnk.nl\/en\/wp-json\/wp\/v2\/pages\/2104"}],"wp:attachment":[{"href":"https:\/\/tradecloud.hdnk.nl\/en\/wp-json\/wp\/v2\/media?parent=1996"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}