Avaza servers are located in multiple regions of North America. All the servers include bank-level security and automated backups, adhering to best practice policies and procedures to prevent data loss.
All data is encrypted at rest. Our databases are on drives encrypted at the disk level by Amazon AWS using AES 256 encryption.
We have a strictly limited number of personnel who can be authorized by customers to look at customer data in the event that level of assistance is requested. You can read our privacy policy here. Avaza is also PCI and GDPR compliant.
Additional FAQs:
Is it possible to store customer data within the EU server with backups also in EU?
We are considering adding servers in the EU in the future. We shall make sure to provide an update when necessary.
Would it be possible to view a network diagram of the Avaza platform
Here's a basic topology: Amazon Route 53 > Amazon Cloudfront > Amazon ELB > Amazon EC2 Servers (Customers shared across pools of Multiple redundant Web & Database Servers) > Amazon S3.
Do you have Anti-malware protection in place on the production servers?
We have Windows Defender running on our Windows Servers. It's important to note that no customer data is ever stored on those servers. Customer file attachments are stored in Amazon S3.
Does the project management platform allow SSO?
Yes, Avaza supports SSO with Google Apps for work.
Do you perform any monitoring of logs and alerts set up to detect suspicious behavior, incidents, and unauthorized access?
We log all unusual requests & exceptions, and these are continually monitored by our developer and security teams. We also have some level of DDOS & malformed tcp protection provided by our Amazon ELB load-balancing infrastructure.
Do you use a 3rd party cloud service provider or host everything on-premise? Everything is hosted in Amazon Cloud and you can refer to this link for more details on AWS Compliance Programs.