Priority of the security
We are taking steps to create strong security principles among all Firecrux employees. All Firecrux employees are familiar with the security policy and must undergo security training. All employees working at Firecrux must follow the rules regarding security and password locking, and must use a secure Wi-Fi connection or a VPN connection during remote work.
IT department employees follow the best coding and programming practices. They also receive regular information about the latest cybersecurity issues in our security channel.
Security Team
Firecrux's team includes security engineers. This team is responsible for maintaining Firecrux's protection and defense systems, reviewing operational security processes, building a security framework and creating new security policies. They also monitor all suspicious activities, respond to cyber security threats, and regularly conduct health checks and audits. Questions about personal data go to our Data Protection Contact.
Security support
All our end devices have disk encryption, malware protection, guest access disabled, a firewall and a regularly updated operating system. We also carry out regular checks to make sure that we maintain a high level of security.
We monitor internal traffic for suspicious behavior, which includes network analysis and system log reviews to identify unusual behaviors. Firecrux regularly scans for potential threats. Once a vulnerability that requires our attention is identified, our security team tracks it and monitors it until the problem is resolved.
We always test new features before releasing them, to make sure that the application does not contain unexpected security vulnerabilities. We also test private instances for our new customers.
Data protection for our clients
We keep data on servers in the European Union, in Germany and Poland, with backups in a European region. Our sites sit behind a network that filters attacks and bots. Clients in data-sensitive industries can have their Firecrux service hosted on a private cloud. We use Transport Layer Security (TLS) to encrypt data in transit and add security checks depending on the requirements of our clients. The providers we work with are listed in our Privacy Policy.
Our platform helps clients comply with the GDPR. Clients have full control over consent management and the rights of data subjects, and the data API allows clients to integrate their systems to handle data requests quickly. When we process personal data for a client, we sign a data processing agreement under Art. 28 GDPR.
Our priority is to protect our clients' data and resources. We will continue to improve our security measures and keep abreast of the latest cybersecurity developments to ensure compliance.
Report a vulnerability
If you find a security issue in our sites or products, write to [email protected]. Please give us time to fix it before you make it public. We look at every report and tell you what we did about it.