Security

Antavo’s CISO is responsible for security while the independent DPO ensures that the organization processes the personal data of its staff, customers, providers or any other individuals in compliance with the applicable data protection rules.

To ensure our technology offers flawless protection and has no critical vulnerabilities, our product undergoes an external penetration test twice a year.

All APIs that forward personal information are protected, as they are sent over encrypted channels and API signatures in order to ensure that the data hasn’t been changed.

To guarantee the safety of in-transit data, each and every API endpoint uses an encrypted connection, while the data at rest is also encrypted on Google Cloud.

We implement granular data controls so that only necessary information is forwarded through APIs to minimize the risk of an accidental data leak.

Antavo’s software and conduct are fully compliant with GDPR, ensuring that customers can maintain their right to control their data.

Antavo’s internal privacy policy dictates strict rules for each and every employee on how to handle client data, coupled with an established chain of authority within the organization.

As part of Antavo’s Business Continuity Management system, our extended Disaster Recovery Plan lists a playbook for every expected adverse scenario, emergency, or disaster.

With three different Service Level Agreements available to choose from, we offer the highest level of availability to our clients.

Antavo has a full team dedicated to testing any and all updates to its software, so the results go live without any security flaws.