ActivePlatform Security

At ActivePlatform, security is vital to everything we do and plays a key role in everything from how we build and deliver our platform to how we hire and train our employees. We're committed to the security of our software and infrastructure and it is a cornerstone of account controls, audits and the services we provide to our customers.
Keystones of ActivePlatform security
Security culture and operations
Security is embedded in the culture of ActivePlatform — from employee hiring processes to ongoing operations and training programs. ActivePlatform participates in the Cloud Security Alliance self-assessment initiative.

We remain committed to delivering a secure product and platform and privacy practices that ensure trust and control of customer data.
Security at the core of technology
The ActivePlatform Platform is built on a foundation of data control and governance to ensure the security of user and enterprise data.

We create and maintain a rigorous control security framework built around regulatory, legal and statutory requirements as well as industry best practices.
Compliance
We audit against the ISO/IEC 27001 standard, demonstrating that ActivePlatform meets the most stringent, internationally recognized security standards. Compliance with ISO 27001 ensures ActivePlatform has a comprehensive and mature security management program in place that aligns with industry standards.

We regularly do self-assessment in according with CSA STAR Cloud Controls Matrix to ensure safety of the ActivePlatform for cloud providers.
Penetration Testing
As a part of our day-to-day security operations, we are successfully passing regular annual penetration testing procedures two years in a row. We are successfully proving that our platform and customer's data on it are reliably protected from any kind of intruder according to the list of OWASP vulnerabilities.
ActivePlatform is committed to delivering a secure platform. If you believe you have discovered a security vulnerability in ActivePlatform's platform or web applications, please report it to us. We welcome security researchers, developers and anyone with good intentions.