Security and Compliance

Automaited takes information security very seriously and is dedicated to its continual improvement.

Compliance at automaited
automaited takes compliance seriously and understands its significance to both customers and partners. For this reason, we have installed an external auditor and consultancy to obtain independent third-party certification. The reports can be shared upon request. We employ the services of intersoft consulting services AG, one of the leading consultancies in Germany for the digital economy.

GDPR
automaited complies with the essential requirements of the EU GDPR, ensuring data protection is by-design and always-on across our application, infrastructure, and organization.
‍
Data Access Control
Access to customer data follows the need-to-know principle. Authorized staff receive only the access required for their tasks.

Authentication
SSO via google account or sign-in via your company email address. Users will automatically be logged out after a defined retention time.

Encryption
Our organization employs advanced encryption methodologies as endorsed by BSI, which includes the usage of 256-bit AES encryption while the data is at rest. Furthermore, we ensure the safeguarding of network communication through the implementation of TLS 1.2 protocols for the purpose of encrypting data in transit.
‍
Change Management

• Changes follow a defined change management process with review and release steps.
• Code changes are reviewed and tested before release, with security considered as part of the review.

Cloud Security
automaited hosts its servers in Frankfurt (Germany) and utilizes Amazon Web Services (AWS) as its cloud service provider. We also leverage AWS' security and compliance controls for data center physical security and cloud infrastructure. Further resources for this service provider can be found on the AWS Security Cloud website.
‍
Monitoring & Logging
automaited maintains a comprehensive log of all user and automaited assistant activities. This data is used for troubleshooting and support. It is only stored as long as the purpose requires it.
‍
External Penetration Testing
automaited undergoes an external penetration test by an independent third party on an annual cadence, at minimum.

Security Policies
automaited actively maintains a collection of data security and privacy policies which keep our customers top of mind. We apply these policies in our daily work to protect customer data.

These policies are shared with each and every staff member who joins automaited, and updated regularly to stay up to date. These policies collectively ensure automaited holds themselves to the highest standards, such as the EU's General Data Protection Regulation (GDPR).

If you have any feedback or question, please reach out to contact@automaited.com