Introduction

​

Swifteq is, at the heart of it, a data company. Protecting the data our customers have entrusted us with is is our primary concern from day one. While it is not a good practice to provide a detailed overview of specific security measures taken, we believe it is important for our customers to be aware of some of the general steps we take to protect their data. If you have specific security concerns, please reach out to support@swifteq.com

​

This document is intended to complement our Service Terms and Privacy Policy

 

Data Centre Security

​

All Swifteq servers and data are stored securely in Amazon Web Services (AWS) facilities in Europe, Ireland. This service provider meets international security standards such as ISO 27001 and SOC 1, 2 and 3.

​

All data is always stored exclusively within EU.

 

We have multiple levels of back up processes to minimise data loss in case of an attack or system failure.

 

All backups are encrypted and stored in secure cloud locations within EU.

 

All traffic to and from our data servers is conducted over HTTPS and is thus encrypted.

 

Application Level Security

​

Swifteq account passwords are hashed. Our own staff can't even view them. If you lose your password, it can't be retrieved- it must be reset.

​

All login pages (from our website and mobile website) pass data via TLS.

​

The entire Swifteq application is encrypted with TLS.

 

We utilise Auth0 for Login and session management functionality and thus benefit from their extensive security measures.

 

Depending on the app or service used, where possible we minimise the amount of personally identifiable data we collect about from our customers’ users.

​

Where possible, we rely on well-established open source software to avoid any potential for malware.

 

Internal IT Security

 

The Swifteq office is secured by keycard access.

 

We mandate usage of secure passwords across all third party software in use by the Swifteq team. Additionally, where offered we employ 2-factor authentication.

 

We perform security audits on any third party software in use by the Swifteq team.

 

We mandate full disk encryption and latest versions of anti-virus and firewall software across every computer used by the Swifteq team to access client data.

 

We protect every computer in use within Swifteq with a secure password and additional security measures where possible.

​

Every employee undergoes security training to understand the importance of protecting customer data.