Security is the core of our business at TraKNC Inc.. This Security Policy outlines the measures we take to protect the data, privacy, and security of our customers and their users. We are committed to maintaining the highest standards of security for our SecurIQ platform and infrastructure.
1. Security Program Overview
We maintain a comprehensive information security program that includes administrative, technical, and physical safeguards. Our security team is responsible for monitoring threats, conducting risk assessments, and implementing security controls to protect our systems and data.
2. Data Encryption
We use industry-standard encryption to protect data both in transit and at rest.
In Transit: All data transmitted between your browser and our servers is encrypted using TLS 1.2 or higher.
At Rest: Customer data is encrypted at rest by our infrastructure providers (AES-256).
3. Access Controls
Access to our production environment is strictly limited to authorized personnel who require access to perform their job duties. We use multi-factor authentication (MFA) for all internal access and enforce strong password policies. Access logs are monitored and audited regularly.
4. Infrastructure Security
SecurIQ runs on infrastructure from established cloud providers whose data centers maintain their own independent security attestations (such as SOC 2 and ISO 27001). Physical security controls are operated by those providers. Their facilities use physical security measures such as surveillance, access controls, and redundant power and cooling systems.
5. Vulnerability Management
We perform internal security reviews of the platform. Independent third-party penetration testing is part of our security roadmap; contact us for current status.
6. Employee Training
All employees undergo background checks and security awareness training upon hire and annually thereafter. Our training covers topics such as phishing, password security, data privacy, and incident response procedures.
7. Incident Response
We have a formal Incident Response Plan in place to handle security events. This plan includes procedures for detection, analysis, containment, eradication, and recovery. In the event of a security breach affecting your data, we will notify you in accordance with applicable laws and our agreements.
8. Security Documentation and Audits
TraKNC does not currently claim a SOC 2 or ISO 27001 certification for SecurIQ. Current security documentation and the status of any audits in progress are available on request at [email protected] or [email protected].
9. Contact Us
If you have any questions or concerns about our security practices, please contact our security team at:
TraKNC Inc.
7601 River Rd, North Bergen, New Jersey 07047
Email: [email protected]