Vendor SOC 2 reports (or equivalent) are collected and reviewed on at least an annual basis.
Communications
Privacy Policy
A Privacy Policy to both external users and internal personnel. This policy details the company's privacy commitments.
Access Security
Unique Access IDs
Personnel are assigned unique IDs to access sensitive systems, networks, and information
Access to Product is Restricted
Non-console access to production infrastructure is restricted to users with a unique SSH key or access key
Availability
Uptime and Availability Monitoring
System tools monitors for uptime and availability based on predetermined criteria.
Organizational Management
Information Security Program Review
Management is responsible for the design, implementation, and management of the organization’s security policies and procedures. The policies and procedures are reviewed by management at least annually.