Security is our priority. With HR-Assistant your data is always safe. We have put in place a multi-layered set of measures to ensure security that are unlikely to be taken in-house.
Physical security – The hosting infrastructure is located in secure data centres using all the latest electronic surveillance technology as well as multi-factor access control systems. These data centres are protected 24 hours a day, 7 days a week by specialised security personnel and access is granted on a minimum privilege basis only. Every time a person leaves an area containing customer data, they are inspected. Environmental systems are designed to limit the impact of downtime on operations. Data centres are located in different geographical regions and in different availability zones, so service can be guaranteed even if failures affect a particular area, even if the cause is due to natural disasters. The infrastructure is designed to provide optimal availability without sacrificing customer privacy and confidentiality.
Application security – HR-Assistant has been developed on a software platform designed for the highest security standards. The multi-layered application architecture allows both logical and physical separation of the presentation and execution layer from the data access layer to ensure the necessary checks are in place before allowing access to the database. Sophisticated security rules control which users can access each feature and data table to the point where individual actions are controlled at the individual record level.
Automatic data back-up – All customer data is backed up daily in a secure storage area, located in a different availability zone from the one in which the service is provided, to minimise the risk of data loss, including from natural disasters or system failure. In addition, the customer can request a copy of his data at any time.
Constant monitoring – The hosting infrastructure is protected by an extensive network of monitoring systems. These systems provide important security features such as basic protection against DDoS (Distributed Denial of Service) attacks and detection of brute force attacks on accounts. In addition, the infrastructure components are continuously scanned and tested. In addition, the application-level accessibility of the HR-Assistant service and the load on the servers on which it is hosted are constantly monitored to ensure that the service is always available with adequate response times.