Customer Trust Portal
A clear overview of our data security posture for customers, partners, and prospects.
We understand that our customers entrust us with sensitive information and expect the highest standards of security, confidentiality, and reliability.
Program overview
Overview
Our information security program is designed to align with industry best practices and recognized standards, including SOC 2 Type II requirements, and is continuously enhanced through independent assessments, risk management activities, and ongoing monitoring.
Our systems leverage industry-leading cloud and security technologies to provide a secure and resilient environment for customer information.
Security program
Our infrastructure is designed with resiliency, redundancy, and business continuity considerations to support system availability and operational resilience.
Independent third-party assessments, periodic penetration tests, and external vulnerability scanning activities are conducted to evaluate and continuously improve our security posture.
Our security program is overseen through a dedicated vCISO engagement provided by an external company, supporting governance, risk management, compliance oversight, and continuous improvement initiatives.
Protection & access
Customer information is protected through encryption controls both in transit and at rest. Endpoint data is encrypted using full-disk encryption, and Microsoft 365 security capabilities support identity protection and data security.
Access is granted based on least privilege and need-to-know principles. Multi-factor authentication, periodic access reviews, and timely access revocation processes are implemented.
Monitoring & awareness
Security technologies, including endpoint protection, email security, web security, and managed detection and response solutions, support continuous monitoring, threat detection, and incident response capabilities.
Personnel receive information security awareness training during onboarding and periodically thereafter, including phishing simulations and policy acknowledgements.
Resilience & risk
Critical service providers undergo security assessments and periodic reviews.
Documented incident response, backup, recovery, and business continuity processes support operational resilience.
Security at a glance
A quick-reference list of our primary security and compliance posture baselines:
Wiss resources
Find the Wiss policies and contact options that support your review.
