Security

At Graphlit, we prioritize the security and protection of our customers' data. We employ robust security measures, including the use of Azure for encrypted blob storage, HTTPS, and best practices in cloud service management. This page provides an overview of our security practices.

Encrypted Blob Storage with Azure

We utilize Azure's encrypted blob storage for storing customer data. The following security measures are implemented:

• Data Encryption: All customer data stored in Azure is encrypted at rest using industry-standard encryption algorithms, safeguarding it from unauthorized access.

• Encryption in Transit: When transferring data to and from Azure, we ensure the use of secure communication channels, employing encryption protocols such as HTTPS to protect data during transit.

For more information about Azure's security practices, please refer to Microsoft's Azure Security documentation.

HTTPS (Secure Communication)

To ensure the secure transmission of data between our customers and our SaaS software, we enforce the use of HTTPS (Hypertext Transfer Protocol Secure) throughout our platform. HTTPS provides the following security benefits:

• Data Encryption: HTTPS encrypts data during transit, preventing unauthorized interception or tampering.

• Data Integrity: It ensures that data remains intact and unaltered during transmission.

• Identity Verification: HTTPS verifies the authenticity of our website, establishing trust between our customers and our platform.

Cloud Service Best Practices

In addition to leveraging Azure's security features, we adhere to the following best practices for managing our cloud services:

• Access Controls: We implement role-based access controls (RBAC) to limit access to sensitive resources. Only authorized personnel have the necessary permissions to manage and access customer data.

• Regular Audits: We conduct regular security audits and vulnerability assessments to identify and address any potential security risks promptly.

• Data Backups: We regularly back up customer data to prevent data loss and facilitate disaster recovery.

Updates

We are committed to continuously improving our security practices and staying up to date with evolving threats. We may update our security measures as needed to address emerging risks and challenges. We will make reasonable efforts to keep our customers informed of any significant changes.

If you have any questions or concerns regarding our security practices, please contact our Security Team.