Zeronorth Technologies

Zeronorth Technologies is SOC 2 Type II compliant. On SOC2C this listing is Listed.

According to Zeronorth Technologies's public trust center, Zeronorth Technologies is ISO 27001 certified. On SOC2C this listing is Listed.

Zeronorth Technologies is SOC 2 Type II compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.

Yes. Zeronorth Technologies's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.

Zeronorth Technologies hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests; the company can add who performed theirs.

Access to the data is available only through the restricted access control layer implemented through the application. We also use various encryption techniques to ensure data residing on the cloud and data transferring over the cloud is protected and accessible only by the authorized users. The following entities or users are covered by this policy: • Full or part-time employees of ZeroNorth who have access to ZeroNorth or customer data. • ZeroNorth vendors or processors who have access to ZeroNorth or customer data. • Other persons, entities, or organizations that have access to ZeroNorth or customer data. All network, system, and application events must only result from allowable actions through access control mechanisms. Permission may be derived directly from an individual’s identity, or from a job classification or administrative privilege based on that individual’s identity. The principle of “least privilege” specifies that individuals only be granted permission for actions needed to perform their jobs. Limiting actions to those properly authorized protects the confidentiality and integrity of data within the ZeroNorth processing environment. In this context, access control refers to a security service that allows or denies a user request based on privilege, group information, or context. Confidentiality refers to a security service that prevents disclosure of information to unauthorized parties while the information is in use or transit or being stored.

Clients have complete control as well as ownership of their data. With necessary access credentials, Client users can access data anytime, anywhere in the world.

ZeroNorth will, unless otherwise specified by the client, aggregate any and all data entered the application to formulate anonymized voyage data, trends and insights that would be beneficial to voyage management. ZeroNorth takes the utmost care in anonymizing this aggregated data so anything published or sent externally could not be identified or tied to any one client of the application.

Appropriate logging techniques are in place at the AWS, local operating system and database levels to capture valuable metrics and events. At the individual application level, audit control is maintained with clear indication of user, date/time capture on creation and modification of data.

Data is encrypted with industry standard AES-256 encryption algorithm in both transit and at rest.