Security and privacy are paramount
Unit21 is built with state-of-the-art security practices by security experts who have defended the world's largest systems against hackers.
SOC 2 Compliant
The American Institute of Certified Public Accountants (AICPA) and Service Organization Controls (SOC) reports give assurance over control environments as they relate to the storage, retrieval, processing, and transfer of data. The SOC 2 reports cover controls around security, availability, and confidentiality of customer data. Unit21 partnered with Armanino, one of the largest independent business auditing firms in the country to attest to Unit21's compliance with SOC 2 Type I and Type II stringent standards.
Penetration Tested
Unit21 works with world-class independent security consultants to conduct regular penetration tests on all parts of our systems. We partnered with Doyensec and Cobalt to work with us to find security loopholes before the bad guys can. Aside, we also run frequent vulnerability scans on our code to ensure that application bugs are squashed before they make it into production.
GDPR & CCPA Compliant
The General Data Protection Regulation (GDPR) is a comprehensive European Union privacy regulation that gives EU citizens and other individuals in the EU authority over their own personal data. The California Consumer Privacy Act (CCPA) is a state statute intended to enhance privacy rights and consumer protection for residents of California. Unit21 is compliant with both the GDPR and CCPA.
System of Action
Robust Data Encryption
We encrypt your data at rest using 256-bit AES encryption in storage and 256-bit SSL/TLS encryption in transit.
Network Security
We divide our systems into separate networks to better protect sensitive data.
Privacy Controls and Visibility
Unit21 is built upon being able to understand user profile and behavioral risks on your platform.
Secure Authentication
Unit21 utilizes the services of the Auth0 identity platform to ensure that we provide the most airtight and sophisticated suite.
Comprehensive Audit Logs
Any access to customer data in cases when customers need our assistance is exhaustively logged and regularly audited.
Internal Data Access
Our team signs a comprehensive privacy policy. No live or anonymized data lives on employees’ computers.
Uptime and Durability
Encrypted backups are saved each day to ensure your data is safe and secure.
Multi-Factor Authentication
Multi-factor authentication (MFA) is required to access our production infrastructure and customer data.
