Home " Security
Of course, our ISMS, which focuses on continuous learning, is supported by our own FullyInControl platform. This allows us to take information security to an ever higher level!
In the development of FullyInControl, the security of your information was paramount. FullyInControl is a modern cloud platform built on Amazon Web Services in a fail save and scalable environment. The infrastructure is fully scalable and adapts based on load and number of users (elastic cloud). This allows us to achieve optimal availability and performance.
The FullyInControl database is built in a distributed fault tolerant environment with automated data recovery. In addition to multiple snapshots and backups per day, the data in FullyInControl is replicated in 3 clusters in three separate locations. This means that the data is stored 3 times. If something happens to the primary cluster, one of the other clusters takes over data processing in seconds and a new cluster is immediately built.
Our data centers are located within the European Economic Area (EEA) (Specifically Amazon Region EU-West-1 (Ireland)), with the European Union Data Protection Authorities having approved the data processing agreement of our data centers.
Multi Factor Authentication (MFA) ensures that you need a token to log in. Also, FullyInControl has extensive integration with Microsoft Entra ID for Single Sign On (SSO) and Identity Management. So you benefit from all the Microsoft Entra ID Identity Management security features.
Our environments are monitored 24/7 based on Amazon GuardDuty. GuardDuty quickly uncover threats using comprehensive detection algorithms and machine learning (ML), behavioral modeling.
FullyInControl has a very comprehensive rights system. This determines which modules, functions within module, data in a module and items in a module are available to a user based on a (self-defined) user role. A user can have multiple roles.
All components of the FullyInControl systems run within a Virtual Private Cloud. This means that communication between the subsystems does not go over the Internet. This greatly reduces risk. Only the communication between the user's browser and the application server goes over an encrypted connection over the Internet.
Should the data sent over the Internet be captured, it is encrypted via strong TLS SSL encryption (TLS 1.2 and above only) (Encryption in transit). The data at rest is also encrypted with 256-bit strong encryption.
FullyInControl regularly has Penetration Testing performed on our software and infrastructure.
Furthermore, our infrastructure providers have the following certifications, among others:
To provide an independent view on our activities we undertake to keep our Information Security in order, Fully In Control has been ISO27001 certified by Brand Compliance. The scope of the certification is: Information security related to the design, development, management and operation of the FullyInControl (IMS) platform.
All this, of course, managed with our own platform >