Ensuring Top-Notch Security
Pro-Sapien's EHS software is designed to help organizations with thousands of employees maintain the highest standards of security. With that in mind, we implement robust security measures and best practices to protect your data and ensure compliance.
ISO 27001:2022 Certified
At Pro-Sapien, we prioritize the security of your data. Pro-Sapien is ISO 27001:2022 certified, which means we adhere to the highest standards of information security management. This security management certification ensures that we have implemented robust security controls and processes to protect your data from threats and vulnerabilities. Regular internal and external audits are conducted to maintain our compliance and continuously improve our security measures.
Powered by Microsoft Azure
Our software is hosted on Microsoft Azure, a leading cloud platform known for its security and reliability. By leveraging Azure's advanced security features, we ensure that your data is always protected. Moreover, it also means that your data is in your Azure environment, fully under your IT control.
Azure provides multiple layers of security, including encryption, identity and access management, and threat detection. This integration allows us to offer a secure and scalable solution that meets the needs of modern enterprises.
Authentication
Pro-Sapien’s EHS software employs OAuth authentication to ensure secure service access. This method allows users to authenticate without sharing passwords, enhancing security by providing authorization tokens. Additionally, Pro-Sapien uses Single sign-on with Microsoft 365 and Azure AD, making it both secure and versatile while further enhancing its functionality and reliability.
This also ensures Pro-Sapien users are authenticated using multi-factor authentication and third-party security tools you may have already configured.
Key Security Features
Data Encryption
All data stored in our system is encrypted both at rest and in transit, ensuring that your information is always protected.
Access Control
We use Azure Active Directory for identity and access management, allowing you to control who has access to your data and applications.
Regular Audits
Our ISO 27001:2022 certification requires regular internal and external audits to ensure ongoing compliance with security standards.
Threat Detection
Azure's advanced threat detection capabilities help us identify and respond to potential security threats in real-time.
Software Scanning and Penetration Testing
Pro-Sapien software incorporates advanced security measures to safeguard its applications. These best-in-class tools identify and mitigate potential security risks within the software.
By integrating industry-leading development practices, Pro-Sapien ensures that security is embedded throughout the development lifecycle, promoting continuous integration and delivery without compromising on safety.
Regular Scans and Third-Party Testing
To maintain the highest standards of security, Pro-Sapien conducts regular scans and employs third-party penetration testing. These rigorous assessments are designed to detect any vulnerabilities that could be exploited by malicious actors, allowing the development team to address issues promptly and effectively.
The combination of state-of-the-art security tools, robust development practices, and regular third-party testing underscores Pro-Sapien's commitment to delivering secure and reliable software solutions.
Azure Key Vault Integration
Pro-Sapien leverages Azure Key Vault to securely store sensitive configuration data, ensuring that sensitive information is safeguarded against unauthorized access.
Azure Key Vault is a cloud service designed to securely manage keys, secrets, and certificates. By utilizing this robust service, Pro-Sapien enhances the security of its applications by storing connection strings and other secrets in a centralized, secure location.
Managed Identity
To further fortify security, Pro-Sapien employs managed identity to ensure that only the application has access to these connection strings. Managed identity provides an identity for applications to use when connecting to resources that support Azure AD authentication. This eliminates the need for storing credentials in the code or configuration files, significantly reducing the risk of credential exposure.
By integrating Azure Key Vault with managed identity, Pro-Sapien ensures that its applications can seamlessly and securely access the necessary sensitive configuration data without human intervention. This approach not only enhances security but also simplifies the management of secrets, providing a streamlined and efficient solution to safeguard sensitive information.
Data Encryption
All communication between the client web browser and the Pro-Sapien application is secured using the HTTPS protocol.
Secrets, and other sensitive configuration data are stored securely in the Key Vault and accessed directly by the Web App and Function App in Azure. The SQL Azure database is configured with Transparent Data Encryption enabled to ensure application data is encrypted at rest.
Let us answer your questions
We'd love to hear from you. Use this form to contact our team with your questions and someone will be in touch as soon as possible.
Commitment to Continuous Improvement
At Pro-Sapien, we are committed to continuously improving our security practices. We regularly review and update our security policies and procedures to ensure that we are always aligned with the latest industry standards and best practices. Our goal is to provide you with a secure and reliable software solution that you can trust.
Learn more about us and how we work.