Security | Antavo

Excelling in data protection

At Antavo, we understand the critical role of data security. Our product is built with security and least data principles at its core, ensuring that your information is protected with the utmost care. Trusted by the world's leading brands, retailers, and hospitality businesses, we are committed to safeguarding your data with unparalleled dedication.

Book a demo call

Complying with security standards

Certifications

Antavo is proudly compliant with one of the strictest information security standards, ISO 27001. Adhering to regulation of this standard ensures that customer data is handled with the utmost care at all times.
Being a cloud-native loyalty software provider Antavo also adheres to the ISO 27017 standard, to create and maintain a safe cloud environment.
A successful loyalty program should be built upon well structured and safely kept personal information of your consumers. This is why Antavo is compliant with ISO 27018, an international standard to protect personal data in a cloud storage.

Complying with regional regulations

Data protection

Antavo accepts data only through secure channels, protected by TLS 1.2 or higher and stores data on encrypted volumes. This way the data is encrypted both in rest and in transit.
Antavo’s Information Security Management System defines strict data retention policies to ensure your business’ data only stored for the time of the processing.
Antavo is compliant with GDPR and the UK version of the GDPR to establish the highest of data privacy standards within our organization.

Protecting data integrity

Access controls

Antavo supports industry standard access controls like single sign ons and multi-factor authentication to safeguard your data and loyalty configurations from unauthorized access.
Thanks to the robust, role-based access controls (RBAC) built into the solution, you are in total control over which kind of data can be accessed and by whom based on their organizational role.
Access to the management systems and changes made to the data are continuously logged to protect the integrity and exposure of your most valuable data assets.

Preventing intrusion

Cloud Security

Antavo uses the world-renowned and trusted Google Cloud Platform (GCP) to provide its services.
We are using industry standard network segregation methods, application firewalls and hardened security configurations to minimize the risks of intrusion and denial of service attacks.
Antavo is cloud native and is dedicated to provide best in class information security to its customers, so your personal data never leaves the cloud and it never gets stored on premises.

Protecting data integrity

Business Continuity

As a high-value enterprise business, you need to expect the unexpected. That’s why Antavo has a developed business continuity policy ensuring smooth operations even when extraordinary things happen.
Recognizing the importance of data integrity and availability Antavo regularly backs up its mission-critical databases.
Having a well-developed Disaster Recovery Policy ensures that even in the event of a bigger outage the data can be restored within the committed recovery time objective to the recovery point objective.

Testing against vulnerabilities

Continuous improvements

Antavo regularly tests its own codebase and IT infrastructure for well-known and 0-day vulnerabilities
Besides regular vulnerability testing Antavo also works together with independent third-parties to complete penetration tests and mitigate any risks found by those tests
Antavo has an appointed information security officer and a DPO.

Become a partner