AuthBridge is committed to protecting your Personal Data. AuthBridge is certified to ISO/IEC 27001:2013 and has the following appropriate technical and organizational information security measures in line with the international standard-

Any Personal Data/ Sensitive data is classified as confidential as per AuthBridge information classification policy.

• Risk Assessment – Risk assessment activity is conducted periodically and based on the impact assessment, required security controls are identified and implemented to protect Personal Data.
• Personnel Security – All employees are background verified prior to sharing the Personal Data with them. Confidentiality agreement and Acceptable use policy are signed with all employees. Awareness training based on data privacy, data security and data privacy incident reporting procedure is conducted periodically. For AuthBridge’s third party service providers, background verification is also conducted along with signing the agreement including data privacy or data security obligations, NDA and Code of conduct.

IT Controls –

• Systems & Network Security controls are applied such as System Hardening, Patch Management, VPN Connectivity, Firewall, Intrusion Detection and Prevention System, Patch Management, End Point Protection, Anti-virus, Data Leak Prevention, VAPT of systems, servers, applications, networking devices and applications and Log Management.
• Communication Security controls such as Encryption (Data at rest and transit, SSL/TLS, SSH, Message digest)
• Application security practices including secure SDLC process, security scanning and IP based restriction. Other data security and access management practices are as per controls described in this section.
• Access Management controls such as access role-based access, password protection, multi-factor authentication and principle of least privileges.
• Masking of personal data wherever not needed. Periodic and need basis access review and reconciliation.
• Log Management -Logs are stored at secure place. All accesses to the applications are logged in a secure platform and/or application specific database down to the activity level.
• Business Continuity is ensured through highly resilient and redundant architecture, regular and systematic backups for all business-critical applications and servers as per the defined frequencies. Periodic testing of business continuity & disaster recovery plans is conducted, and continual improvement actions are taken.

Physical Security Controls –

• AuthBridge’s premises are protected 24/7 through security guards to restrict any unauthorized entry.
• Visitor management process and Material In/Out process is implemented.
• Biometric device is in place to capture the entry of employees and registered is maintained for all visitors. Reconciliation is done periodically.
• There is 24/7 CCTV monitoring. Restricted areas are labeled, and entry is allowed for only authorized users.
• There is 24/7 Power back up to support smooth functioning of the facilities. Preventive maintenance is done for support equipment. Facility temperature is maintained with air conditioners. Fire Detection & Prevention system is implemented.
• Emergency Response Team (ERT) members are assigned to each working floor to ensure the timely evacuation in case of emergency. Considering the data center security, we have water leakage alarm, rodent repellent system implemented in place, humidity & temperature monitoring mechanism, separate visitor registers for restricted area, and inventory movement register in place.

Incident Management Process –

• Though AuthBridge has the best possible controls to protect privacy of your Personal Data, there is an incident management policy and procedure implemented to address any security incidents/privacy breach. Incidents are reported, recorded, investigated, and responded with the corrective action plan in a timely manner. There is a mechanism to notify the impacted clients (if applicable) who must further notify the respective individual/s.