Security You Can Trust
AssessX is built with security at its core. We protect your assessment data with enterprise-grade security controls and industry-leading certifications.
Security Architecture
Built from the ground up with enterprise security requirements
Data Encryption
All data is encrypted at rest using AES-256 and in transit using TLS 1.3. Customer data is isolated in dedicated encryption domains.
Access Control
Role-based access control with dynamic permissions, MFA enforcement, and session management with configurable timeouts.
Audit & Monitoring
Comprehensive audit logging of all user actions with AI-powered anomaly detection and real-time alerting.
Infrastructure Security
Hosted on enterprise-grade cloud infrastructure with SOC 2 certified data centers, redundancy, and disaster recovery.
Authentication
Support for SAML 2.0, OAuth 2.0, and OpenID Connect. Integration with enterprise identity providers and MFA enforcement.
Data Isolation
Multi-tenant architecture with strict data isolation. Each customer's data is logically separated with dedicated encryption keys.
Compliance & Certifications
Independent verification of our security controls and practices
SOC 2 Type II
Annual audit of security, availability, and confidentiality controls
- Independent third-party audit
- Continuous monitoring controls
- Trust services criteria coverage
- Annual report available to customers
ISO 27001
International standard for information security management systems
- Certified ISMS
- Risk management framework
- Continuous improvement process
- Regular surveillance audits
GDPR
European Union General Data Protection Regulation compliance
- Data subject rights support
- Data processing agreements
- Privacy by design
- EU data residency options
HIPAA
Health Insurance Portability and Accountability Act ready
- BAA available
- PHI protection controls
- Access controls for ePHI
- Audit trail requirements
Security Practices
Comprehensive security programs across development, operations, and business continuity
Secure Development
- Secure SDLC with security reviews at each phase
- Static and dynamic application security testing
- Regular penetration testing by third parties
- Dependency vulnerability scanning
- Code review requirements for all changes
Operational Security
- 24/7 security monitoring and incident response
- Vulnerability management program
- Regular security training for all employees
- Background checks for all personnel
- Vendor security assessment program
Business Continuity
- 99.9% uptime SLA with redundant infrastructure
- Multi-region disaster recovery
- Regular backup and recovery testing
- Incident response and communication plans
- Documented business continuity procedures
Security Features at a Glance
Have Security Questions?
Our security team is available to answer your questions, provide documentation, and support your security review process.