Security and Compliance
At Binalyze; we identify the privacy and information security as the crucial part of our product and company. In this regard, we are taking every possible measures to maintain a top-class information privacy and security posture, including practices beyond the existing curve in the industry.
GDPR
Binalyze, as an organization that falls within the scope of the General Data Protection Regulation (GDPR), has been taking every practical step, including but not limited to internal/external audits, maintenance, training, governance and documentation to meet the requirements for properly handling personal data as defined in the applicable law. These task are grouped into the principles of:
-
Lawfulness, fairness and transparency
-
Purpose limitation
-
Data minimisation
-
Security
-
Accuracy
-
Storage limitation
-
Integrity, availability and confidentiality
-
Accountability
ISO/IEC 27001 Certified
Since April 2021, Binalyze has been ISO/IEC certified for its above-the-standard information security operations and management. Along with ISO 27001 base certification, Binalyze is also certified for ISO/IEC 27017, ISO/IEC 27018, ISO/IEC 27701 standards.
Binalyze is also listed as among Cloud Security Allience's STAR Level 1 Registry.
AICPA SOC2 Type I Certified
Effective since May 2023, Binalyze has achieved SOC 2 Type I compliance in accordance with American Institute of Certified Public Accountants (AICPA) standards for SOC for Service Organizations also known as SSAE 18. Achieving this standard with an unqualified opinion serves as third-party industry validation that Binalyze provides enterprise-level security for customer’s data secured in the Binalyze systems.
Privacy Policy
The privacy policy of Binalyze is crucial in building trust with our clients/partners and ensuring their personal information is handled responsibly. By highlighting our privacy policy, we aim to demonstrate our commitment to safeguarding our clients' data and protecting their privacy. In Binalyze, the data privacy has the top priroty; therefore, all necessary policies and due care are in place to maintain a robust date privacy posture, with respect to GDPR.
Information Security Management
In Binalyze, a continuous and sophisticated information security management system (ISMS) is adopted, which encompasses the entire developmenmt/production environment and the business operations. The ISMS includes organizational policies, procedures, standards, charts, official audits and reviews that involve all stakeholders.
Data Center Security
In order to ensure the excellent and efficient information security practices, Binalyze hosts its development and production environments in major cloud service providers with shared-responsibility model. The combined information security practices utilize encryption, continuous monitoring/governance, malware protection, backup, data retention, redundancy, DoS protection and other various means, aligned with multiple major information security standards.
Threat Intelligence
Threat intelligence plays a critical role in information security by helping organizations identify and mitigate potential security threats before they can cause harm. By collecting and analyzing data about emerging threats and malicious actors, threat intelligence enables organizations to stay ahead of attackers and take proactive measures to protect their networks, systems, and data. In today's rapidly evolving threat landscape, threat intelligence is more important than ever in helping organizations stay secure and protect their valuable assets. By leveraging threat intelligence, Binalzye aims to better understand the threats they face and take the necessary steps to defend against them.
Secure Development Lifecycle (SDLC)
With SDLC principles adopted, Binalyze aims to ensure that the product software is developed in a secure and reliable manner. The adopted SDLC at Binalyze consists of several stages, including requirements gathering, design, implementation, testing, and deployment, at all of which, security considerations are taken into account, such as threat modeling, risk assessments, and security testing. By incorporating security into the development process from the outset, Binalyze minimizes the risk of security vulnerabilities and weaknesses being introduced into the software, starting from the beginning of its supply-chain.
Endpoint Security
At Binalyze, a sophisticated combination of endpoint security measures are in play to protect individual devices, such as laptops, desktops, and mobile devices, from a range of cyber threats, while providing valuable insights into potential security threats and vulnerabilities, helping organizations to take proactive measures to address them before they can be exploited by malicious actors.