An overview of the technical and operational measures relevant to protecting Specicon’s systems, connected applications, and the information they process.
Security across the service.
Our security architecture addresses application boundaries, access to decision services, data separation, and the records required for authorized technical review.
Application isolation. Establish boundaries between customer configurations, data, and permitted service access.
Decision records. Maintain relevant request and decision information according to the configured logging and retention requirements.
Service boundaries. Control communication between applications, platform services, and connected systems.
Protecting data in transit and at rest.
The applicable security configuration defines encryption, credential storage, key management, and the protection of information exchanged between systems.
In transit
Transport encryption configuration.
At rest
Stored-data encryption configuration.
Key management
Issuance, storage, rotation, and access controls.
Secrets
Credential management and handling procedures.
Access defined by responsibility.
Permissions should reflect the functions users and administrators need to perform, with additional controls applied to privileged operations.
Authentication. Supported identity and sign-in methods.
Role separation. Permissions for administrative, operational, analytical, and development responsibilities.
Privileged access and access reviews. Approval, monitoring, and review of elevated access, with periodic assessment of permissions and account access.
Controls subject to review.
Review the testing practices, security assessments, and assurance materials available for the relevant service.
Area
Scope
Evidence
Security testing
Application, dependency, and infrastructure assessments
Available on request
Recovery testing
Backup and restoration procedures
Available evidence on request
Independent assurance
External testing and certification reports, where available
Status in the Trust Center
Remediation
Identified issues, prioritization, and resolution tracking
Internal tracking
Review the technical details.
Contact our team to request available security documentation or discuss the requirements of a technical assessment.