Security - EZOfficeInventory

ISO 27001 Certified

EZOfficeInventory is ISO (International Organization for Standardization) 27001 certified. The ISO is one of the most widely recognized information security standards worldwide, laying out best practices to safeguard the confidentiality, integrity and availability of information in a company. As an ISO 27001 certified company, EZOfficeInventory is able to easily identify, monitor, and eradicate any potential information security risks - particularly as they relate to asset tracking, access control, and classification policies.

GDPR Compliant

With our GDPR compliance in place, European customers can have added confidence in the privacy of the data made available to us. In addition to this, customers themselves can adhere to stronger data protection standards just by using us to track their assets and employee utilization. This means that EZOfficeInventory is not only GDPR compliant itself, but also enables its customers (as Data Controllers) to become GDPR compliant. This has been the result of new functionality relating to data security and consent. For more information, read our blog on GDPR Compliance.

Hosted on Amazon Web Services

All our data is hosted on Amazon Web Services. The AWS is ranked as one of the world’s best cloud computing services, and stores the data of some of the largest global enterprises. To this end, it has robust controls in place to maintain security and data protection in the cloud. The AWS IT infrastructure is therefore designed and managed in alignment with security best practices and a variety of IT security standards. For an overview of the security processes in place at AWS, read their Security Whitepaper.

Additional Security Measures

We continue to make security a priority. Here are some more of our security measures:

All the data we process is encrypted using the AES-256 encryption specification.
We execute penetration testing every six months to identify potential security vulnerabilities.
We are in the process of being certified under the EU-US Privacy Shield Framework.
Our internal and external integrations focus heavily on authentication/authorization protocols.
Our Private Cloud option ensures your company data is kept on a separate server instance.