Security and Privacy are Paramount
Unit21 is built with state-of-the-art security practices by security experts who have defended the world's largest systems against hackers.
SOC 2 Compliant
The American Institute of Certified Public Accountants (AICPA) and Service Organization Controls (SOC) reports give assurance over control environments as they relate to the storage, retrieval, processing, and transfer of data. The SOC 2 reports cover controls around security, availability, and confidentiality of customer data. Unit21 partnered with Armanino, one of the largest independent business auditing firms in the country to attest to Unit21's compliance with SOC 2 Type I and Type II stringent standards.
Unit21 works with world-class independent security consultants to conduct regular penetration tests on all parts of our systems. We partnered with Doyensec and Cobalt to work with us to find security loopholes before the bad guys can. Aside, we also run frequent vulnerability scans on our code to ensure that application bugs are squashed before they make it into production.
GDPR & CCPA Compliant
The General Data Protection Regulation (GDPR) is a comprehensive European Union privacy regulation that gives EU citizens and other individuals in the EU authority over their own personal data. The California Consumer Privacy Act (CCPA) is a state statute intended to enhance privacy rights and consumer protection for residents of California. Unit21 is compliant with both the GDPR and CCPA.
The EU-U.S. and Swiss-U.S. Privacy Shield Frameworks were designed by the U.S. Department of Commerce and the European Commission and Swiss Administration to provide companies on both sides of the Atlantic with a mechanism to comply with data protection requirements when transferring personal data from the European Union and Switzerland to the United States in support of transatlantic commerce. Unit21 actively participates in and abides by the Privacy Shield Framework.
System of Action
We encrypt your data at rest using 256-bit AES encryption in storage and 256-bit SSL/TLS encryption in transit.
We divide our systems into separate networks to better protect sensitive data.
Unit21 is built upon being able to understand user profile and behavioral risks on your platform.
Unit21 utilizes the services of the Auth0 identity platform to ensure that we provide the most airtight and sophisticated suite.
Any access to customer data in cases when customers need our assistance is exhaustively logged and regularly audited.
No live or anonymized data lives on employees’ computers.
Encrypted backups are saved each day to ensure your data is safe and secure.
Multi-factor authentication (MFA) is required to access our production infrastructure and customer data.
Getting started is easy
can help bolster your risk & compliance operations