Clado Trust Center
Clado is in compliance with security best practices, has implemented and is monitoring comprehensive controls, and maintains policies to outline its security procedures.
Compliance
Resources
ISO 27001 Certificate
SOC 2 Type II Report
SOC 2 Type I Report
Incident Response Policy
Data Retention and Disposal Policy
Controls
Password rules enforced
Source code access restricted and changes logged
Production access keys restricted and key management services
Access control procedures
Least-privilege access strictly enforced for produciton infrastructure
Data encrypted at rest
Secure disposal of electronic media containing sensitive data (PII, ePHI, etc.)
Customer data deleted after termination
Database backups performed
Vendor Confidentiality & Privacy Agreements
Secure connection means utilized
Web application firewalls configuration
Development, testing, production environments separated
External Attack Surface Vulnerability Scanning & Remediation
Source code changes tested and approved
Anti-malware monitoring
Intrusion detection tool
Monitoring, measurement, analysis and evaluation
Automated system capacity and performance monitoring
Infrastructure firewall
Incident response procedures documented
Business continuity & disaster recovery plans documented and tested
Security incident logging and review
Business continuity plans ensure emergency functionality
Visitor sign-in, badging, and escort policy
Internal Audit Program
Clear desk/screen policy established
Compliance requirements documented
Technology assets inventoried
Interested party security requirements logged
Annual risk assessments performed
Documented Vendor Management Program
Confidentiality Agreement acknowledged by employees
Background checks performed on contractors
Security awareness training implemented
Background checks performed on employees
Clock synchronization
Multi-availability zones
Defined and maintained ISMS scope
Whisteblower mechanism maintained
Documentation available to internal and external users
Customer support channels available
Automatic Session Timeout Enforcement
Patch management process developed
Production system hardening and baseline configuration management
Information security policies and procedures
Mobile Device Management (MDM) and BYOT
Subprocessors
Google WorkspaceBusiness Apps & Productivity