Epraise Ltd

Security isn't a single yes/no, but Epraise Ltd is SOC 2 compliant and holds GDPR, CCPA. SOC2C verifies its compliance posture and shows how strongly each fact is proven.

Epraise Ltd hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@epraise.co.uk or via a /security page (Epraise Ltd lists a security contact).

Epraise Ltd lists 37 subprocessors on its trust center, including Amazon Web Services, Apple, Salesforce, Atlassian, AlertLogic. Buyers use this for fourth-party risk review.

Epraise Ltd hosts on AWS. Data residency details are on its trust center.

Epraise Ltd's trust center is at https://trust.epraise.co.uk. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.

Customer data is stored in an AWS datacenter located in Ireland.

Customer data is protected by TLS 1.2+ encryption when in-flight and AES-256 encryption when at rest.

ePraise maintains an incident response team (IRT) made up of technical, and management personnel. The incident response plan follows several high-level phases, including: - Event assessment - Breach assessment & containment - Reporting - Post-breach activities

ePraise utilizes a dedicated Security Operations Center (SOC) to monitor 24x7x365. Additionally, ePraise also has the following security measures in place: - Web Application Firewalls - Distributed Denial of Service (DDoS) mitigation - File Integrity Monitoring (FIM) - Intrusion detection systems (IDS)

ePraise maintains sufficient cybersecurity insurance to protect ourselves and our customers in the event of an incident.

ePraise utilizes cloud providers to assist with a timely response and recovery in the event of a disaster. Our disaster recovery plan consists of multiple parts, including but not limited to the items below. - Customer data is backed up continuously in a redundant location - Backups are available for at least 30 days - Backups are stored at AWS - Ability to re-create the infrastructure in a different cloud region Note: No customer data is stored on-premises.

ePraise has both a Website Privacy Policy and a Product Privacy Policy.

Please see ePraise's Controls for details on what we do to protect customer data.

ePraise performs security assessments on all third-party vendors before any data is exchanged. This process includes questions surrounding the company's security policies, procedures, controls, and compliance with any applicable industry standards, and focuses on identifying any potential vulnerabilities or gaps.

ePraise complies with GDPR, UK GDPR, CCPA, COPPA, and FERPA. While ePraise is not subject to HIPAA, many of our security and privacy practices align with those principles. Please see ePraise's Resource and Compliance section for auditing information and currently available reports.

Epraise employs advanced monitoring of the dark web using a tool called Recorded Future which automatically scans and collects data from dark web sources. This information is used to identify potential threats, such as leaked credentials or sensitive company information. When compromised credentials are detected, these high priority alerts are automatically routed to our internal IT team who then take the necessary steps to mitigate the risk. With the ability of Recorded Future to proactively detect potential threats, it allows us to take preventative measures like password resets or account lockouts before a bad actor can utilize these credentials in a malicious manner. By staying vigilant and proactive, Epraise is actively mitigating the risk of unauthorized access and potential data breaches, ensuring a higher level of security.