Our commitment to security
Clearspeed helps our clients assess risk to make better, faster decisions at scale, and trust is a critical requirement. Your trust is our number one priority.
Our commitment in practice
Clearspeed is committed to the security of our clients and their data. As a cloud-based company, we are focused on keeping you and your data safe. We encrypt all sensitive data in use, at-rest and in-transit. Clearspeed undergoes regular penetration testing and security audits, designed to meet SOC 2 audits, ISO 27001 and GDPR-compliance requirements, and beyond. This commitment to security is ingrained in our culture.
Encryption
All Clearspeed corporate and client data is encrypted in transit with TLS 1.3. Data is encrypted at rest with AES
Data handling
Clearspeed is in compliance with major data security regulations including GDPR and California Data Protection Act
Security threat detection
Clearspeed employs a number of cybersecurity threat detection solutions including, but not limited to: Endpoint Detection and Response, Next Generation Anti-Virus protection, Mobile Device Management, and password management tools
RBAC
Clearspeed maintains role-based account access workflows to ensure only authorized users have access to data and systems
Secure hosting
Clearspeed’s cloud environments are backed by AWS’ security measures
Continuous security commitment
Information security program
Clearspeed maintains an information security program that is communicated and in practice throughout the organization. Our information security program follows the criteria set forth by ISO 27001, SOC 2, and NIST 800-171.
Security awareness training
Our team members are required to go through regular employee security awareness training covering industry standard practices and information security topics such as phishing and password management. Additionally, we run on-going phishing tests on our team to keep their awareness skills sharp.
Continuous monitoring
We continuously monitor our security and compliance status to ensure there are no lapses.
Roles and responsibilities
Roles and responsibilities related to our information security program and the protection of our clients' data are well defined and documented.
Approved IT Systems and Security Procedures include:
- Personnel Background Checks
- Annual Policy Acceptance
- Personal Device Security (BYOD)
Third-party audits
As part of our commitment to security, Clearspeed undergoes routine independent third-party assessments to test our security controls. We also perform an independent third-party penetration test at least annually to ensure that the security posture of our services is uncompromised.
Transparency
As part of our transparency to our clients, Clearspeed makes our Privacy Policy readily available on our website.
