Security

They are two options available which are cloud-based, or own server based.

Cloud Based access

All cloud-based servers have the following security in place.

1. An encrypted SSL certificate to access system
2. Antivirus software on server
3. Server sits behind a firewall
   1. Only certain ports are opened
   2. Port 80 is blocked
4. Limited staff access to the server
5. Limited staff access to client data
6. Each company has their own database and is NOT in one large database
   1. This means a company can take their own backups offsite
   2. Move to their own server or back to the cloud
7. Passwords on servers are changed every six months or whenever a staff member leaves the organization
   1. Server passwords have a minimum of 30 characters with Capitals, numbers and special characters
8. Servers are located in data centers with no-one allowed access.
9. Each user has their own login username and password
   1. Passwords have a minimum of 8 characters long with a Capital and number as minimum requirement
   2. Two factor Authentication can be enabled per user
   3. Automatic expire dates of passwords can be enforced to Monthly, quarterly or yearly
   4. Past passwords cannot be repeated within a year
   5. Logs are created on each form click
   6. User has automatic 90-minute time out if not working in the system
   7. User will be automatically logged out of the system if they log onto another computer with the same access

Own Server based

For extra security where you don't want to run cloud-based access.

A company can opt for own server installation this means the installation of the software is done on one of your servers where you control access to server.

The company can make use of VPN (Virtual Private Network) access to the system via browser.

Have all the above in place for security.

SSL definition

An SSL (Secure Sockets Layer) certificate is a digital certificate that authenticates a website’s identity and enables an encrypted connection. Here’s what it means to have one:

1. Encryption: SSL encrypts data transferred between the user’s browser and the website, ensuring that sensitive information like passwords, credit card numbers, and personal details are protected from eavesdroppers.

2. Authentication: It verifies that the website is legitimate and not a fake site set up to steal information. This helps build trust with users.

3. Data Integrity: SSL certificates ensure that data sent and received is not tampered with during transit.

4. SEO Benefits: Search engines like Google give a ranking boost to websites with SSL certificates, which can improve visibility.

5. Trust Indicator: Websites with SSL certificates display a padlock icon in the address bar, and their URLs start with “https://” instead of “http://”. This signals to users that the site is secure.