Security is the core of our business at TraKNC Inc.. This Security Policy outlines the measures we take to protect the data, privacy, and security of our customers and their users. We are committed to maintaining the highest standards of security for our SecurIQ platform and infrastructure.
1. Security Program Overview
We maintain a comprehensive information security program that includes administrative, technical, and physical safeguards. Our security team is responsible for monitoring threats, conducting risk assessments, and implementing security controls to protect our systems and data.
2. Data Encryption
We use industry-standard encryption to protect data both in transit and at rest.
In Transit: All data transmitted between your browser and our servers is encrypted using TLS 1.3 or higher.
At Rest: Customer data stored in our databases and storage systems is encrypted using AES-256 encryption.
3. Access Controls
Access to our production environment is strictly limited to authorized personnel who require access to perform their job duties. We use multi-factor authentication (MFA) for all internal access and enforce strong password policies. Access logs are monitored and audited regularly.
4. Infrastructure Security
Our infrastructure is hosted in SOC 2 Type II compliant data centers provided by top-tier cloud service providers. These facilities feature physical security measures such as 24/7 surveillance, biometric access controls, and redundant power and cooling systems.
5. Vulnerability Management
We conduct regular vulnerability assessments and penetration testing to identify and remediate security weaknesses. This includes:
- Automated vulnerability scanning of our code and infrastructure.
- Regular third-party penetration tests.
- A responsible disclosure program for security researchers.
6. Employee Training
All employees undergo background checks and security awareness training upon hire and annually thereafter. Our training covers topics such as phishing, password security, data privacy, and incident response procedures.
7. Incident Response
We have a formal Incident Response Plan in place to handle security events. This plan includes procedures for detection, analysis, containment, eradication, and recovery. In the event of a security breach affecting your data, we will notify you in accordance with applicable laws and our agreements.
8. Third-Party Audits
We undergo regular third-party security audits to verify our compliance with industry standards and best practices. Reports from these audits, such as SOC 2 reports, may be made available to customers under a non-disclosure agreement.
9. Contact Us
If you have any questions or concerns about our security practices, please contact our security team at:
TraKNC Inc.
7601 River Rd, North Bergen, New Jersey 07047
Email: [email protected]