Trust Center

We at Tasktop understand the importance of security to our customers and work hard to ensure that data security and privacy is a top consideration in all of our business processes. This page outlines some of the ways Tasktop protects your information in Tasktop Cloud products - Integration Hub and Viz. Tasktop’s comprehensive information security program addresses policies and processes, people, and technologies to ensure we meet our security objectives.

Infrastructure Security

Tasktop uses Amazon AWS IaaS platform for secure hosting infrastructure. Amazon AWS is a premier infrastructure-as-a-service provider with extensive security certifications and audited controls. For details on AWS certifications and accreditation, please visit https://aws.amazon.com/security/.

Tasktop has established a dedicated environment for our Cloud hosting that is secured and segregated from our corporate network. Tasktop applies strict access control to our production Cloud environment and only allows access to select Tasktop personnel on a need-to-know basis. Access is enforced through multi-factor authentication mechanisms. Our Cloud operations personnel undergo background checks and have active non-disclosure agreements.

Data Security

Tasktop encrypts customer information while at rest and when transmitted over the Internet. All browser connections are encrypted using TLS. All connections of on-prem Viz Agent (if used) to the Viz Cloud backend are encrypted using TLS.

All data at rest is encrypted using standard AWS capabilities. Security critical information, such as repository credentials, is additionally encrypted in the database using per-customer keys.

Tasktop enforces logical segregation for each customer’s data within our environment. Tasktop maintains strict controls over access to our customer data. We will only access specific customer data if it is required to provide the service (for example, if the customer opens a support ticket and Tasktop needs such access to resolve it).

Business Continuity

Tasktop’s Cloud architecture is built to be resilient and is aligned with our service level targets. Tasktop has established data backup and restore procedures that are tested on a regular basis.

Secure SDLC

Tasktop has adopted robust secure development practices based on industry standards. We provide our engineers with regular security training, and perform security code reviews.

Tasktop has implemented extensive automated testing to ensure ongoing quality of our service.

Tasktop employs static and dynamic code scanning as part of our development process to proactively identify potential security issues. All scan results are reviewed, triaged, and appropriately resolved if deemed applicable.

Security Testing

Tasktop has established a number of security testing processes. Tasktop conducts regular vulnerability scanning using commercially available and open source tools.

Tasktop also conducts penetration testing through a third party partner on an annual basis.

Any issues identified through vulnerability scanning and penetration testing are resolved in a timely manner in accordance with the assessed risk level.

Secure Operations

Tasktop maintains a Security Incident Response Plan (SIRP) that defines our process to deal with security issues. Our SIRP establishes roles and responsibilities during a security incident, escalation paths and requirements, and customer notification requirements.

Tasktop keeps the plan up-to-date, conducts regular reviews and incident simulation sessions, and ensures relevant staff are trained.

Supplier Audits

To be able to provide top tier service, we employ several providers (suppliers), such as Amazon AWS. To ensure our supply chain is up to our standards with regard to security, Tasktop proactively monitors our suppliers’ security stance on an ongoing basis. You can find the full list of Tasktop’s sub-processors here: https://www.tasktop.com/tasktop-sub-processors

Questions?

Tasktop’s security experts are available to answer any questions you may have, you can reach us at security (at) tasktop.com