Is customer data encrypted in production? In backup? If yes, who has access to the keys?
All data is encrypted in transfer and all access to the service is governed by strict password security policies. Only selected employees have access to the keys. These employees receive special training and are selected based on the roles required for Samanage to provide the service that our Customers have contracted for. Furthermore, all data is also encrypted at rest using the industry-standard AES-256 algorithm this also includes any and all attachments included. Backups are also encrypted using PGP.