Security

Introduction

At Kadanza, we take data security very seriously.

Data security is an integral part of our global operations. In fact, information security is a vital part of our platform and organization, and it is ingrained in our people, processes, and technologies.

Our approach is straightforward: every employee is properly trained on the use of our different information classification levels to make sure all data is handled safely. They are responsible for information security, including protecting:

• Information assets
• Customer and partner information assets
• Business methodologies and knowledge
• The underlying technology infrastructure

We further ensure the safety of customer data by restricting employee access to our production environment. Access to any Kadanza installation besides our own is managed via a Just-In-Time (JIT) principle. In case we have to provide support and access a customer’s installation.

As a cloud company, we’ve also invested heavily in:

• Maintaining and growing our cybersecurity capabilities
• Building a dedicated compliance team who provides independent assurance that our information security program meets and even exceeds national and international security standards and follows industry best practices
• Supporting employees across all the information security domains with dedicated subject matter experts

Moreover, our program is subject to annual independent audits for compliance and industry standards certifications, ensuring that our program meets and even exceeds all security requirements.

Information classification

We make use of four different information classification levels:

1. Public

Making the information public cannot harm the organization in any way. The information is publicly available.

2. Internal use

Unauthorized access to information may cause minor damage and/or inconvenience to the organization. This information is available for all employees and selected third parties that need access to the information to perform their tasks.

3. Restricted

Unauthorized access to information may cause serious damage and/or inconvenience to the organization. This information is available only to a limited group of individuals in the organization and a restricted number of external parties.

4. Classified

Unauthorized access to information may cause catastrophic (irreparable) damage to business and/or to the organization's reputation. This information is available only to a limited group of individuals in the organization

Whenever you notice a security issue, or you have any security-related questions, don’t hesitate to contact us via infosec@kadanza.com. Our security team will get back to you as soon as possible.