Security - AssetSonar

ISO 27001 Certification

AssetSonar is certified by Resource Inspection Canada Incorporated (RICI) for ISO/IEC 27001 compliance. RICI is a Certification Body associated with the International Accreditation Service (IAS) in the US and is geared towards exceeding customer satisfaction in the fields of ISO Management Training, Auditing, Inspections, Testing, and Certification. The ISO/IEC 27001 is one of the most widely acknowledged information security standards worldwide, outlining best practices to secure the confidentiality, integrity, and availability of information in a company. ISO/IEC 27001 outlines and provides the requirements for an information security management system (ISMS), specifies a set of best industry practices, and details the security controls that can help manage information risks. As an ISO 27001 certified company, AssetSonar is able to easily detect, monitor, and eliminate any potential information security risks - particularly as they relate to IT asset tracking, software license management, customized access control, and classification policies.

GDPR Compliant

With our GDPR compliance in place, AssetSonar’s European customers can have added trust in the privacy of the data made available to us. Additionally, customers themselves can adhere to impregnable data protection standards just by using us to track their IT assets and software utilization. This means that AssetSonar is not only GDPR compliant itself, but also enables its customers (as Data Controllers) to become GDPR compliant. This is the result of our new functionality relating to data security and consent. For more information, read our blog on GDPR Compliance.

Hosted on Amazon Web Services

AssetSonar hosts all its data on Amazon Web Services (AWS). The AWS is ranked as one of the world’s best cloud computing services and stores information of some of the largest global enterprises. To this end, it has robust controls in place to ensure security and data protection in the cloud. The AWS IT infrastructure is therefore developed and managed in agreement with security best practices and a variety of IT security standards. For an overview of the security processes in place at AWS, read their Security Whitepaper.

Additional Security Measures

AssetSonar continues to make data security a priority. Here are some of our additional security measures:

All the data we process is encrypted using the AES-256 encryption specification.
We execute penetration testing every six months to detect potential IT security vulnerabilities.
Our internal and external integrations rely heavily on authentication/authorization protocols.
Our Enterprise Private Cloud option ensures your enterprise’s data is kept on a separate server instance.