1Built into the platform
Security is part of CODED. Core itself, so every System has the same protections from its first day, rather than having them added later.
2Protecting data
- Encryption in transit
- Every connection to a System is encrypted.
- Encryption at rest
- Stored data and backups are encrypted.
- Daily backups
- Data can be restored to a recent point whenever it's needed.
3Controlling access
- Role-based access
- People see and do only what their role allows.
- Two-factor authentication
- A second step at sign-in, so a password alone isn't enough.
- Single sign-on
- People sign in with the Client's own identity provider, where it has one.
- Audit logs
- Significant actions are recorded: who did what, and when.
4Availability and resilience
The systems we run have had no unplanned downtime since 2010.
- Redundant links keep systems reachable if a connection or route fails
- Offline operation: a site that loses its connection keeps working, and syncs automatically when the connection returns
- Every System is monitored continuously
5Infrastructure
Systems are hosted with infrastructure partners chosen for each System's needs, and managed by our team. Each partner is bound in writing to protect the data it handles.
6When something happens
Clients report issues through their dedicated support channels, and outside support hours through the emergency function in their client portal. If personal information is ever compromised, we tell the affected Client without undue delay and support them in meeting their obligations under POPIA.
7Reporting a vulnerability
If you believe you've found a security weakness in CODED. or this site, please email the details to info@coded.co.za. While investigating, please don't access data that isn't yours, or disrupt any service.