Technical and Organizational Measures
Christian Ress avatar
Written by Christian Ress
Updated over a week ago

PlaytestCloud has implemented the following technical and organizational measures to protect the personal data and company data that we process.

Technical Measures

  • Authorization & access control. PlaytestCloud employs authorization to ensure that only users that have the right to access personal data can do so and to limit their access to only the data they are authorized to see and edit.

  • Encryption. PlaytestCloud always uses securely encrypted connections when transferring personal data between systems to prevent eavesdropping and ensure integrity of the transferred data.

  • Endpoint security. PlaytestCloud employs mobile device management for its mobile hardware including remote shutdown and wipe capabilities. Where available, full disk encryption is required to be enabled. PlaytestCloud employees regularly install software updates and security patches on all devices that handle personal data.

  • Secure password storage. PlaytestCloud uses one-way hashing (bcrypt2) to store user passwords.

  • Business Continuity Management. PlaytestCloud employs redundant storage and its procedures for recovering data are designed to attempt to reconstruct customer data in its original state from before the time it was lost or destroyed.

  • Data integrity. PlaytestCloud uses storage systems that can detect data corruption. PlaytestCloud’s software uses constraints as a safety measure to ensure data integrity.

  • Multifactor authorization. Administrator access to PlaytestCloud is secured by 2-Factor Authentication.

  • Dependency Management. PlaytestCloud updates software libraries weekly to benefit from the newest security patches.

  • Durability. PlaytestCloud backs up important data for up to one month so that data can be safely restored in case of a system failure.

  • Reliability. PlaytestCloud has reporting mechanisms and processes in place to quickly react to software problems and outages and correct them as quickly as possible.

Organizational measures

  • PlaytestCloud limits access to facilities where information systems that process customer data are located to identified, authorized individuals who require such access for the performance of their job function. We terminate the physical access of individuals promptly following the date of the termination of their employment.

  • PlaytestCloud company policies require the use of strong and unique passwords for every account.

  • PlaytestCloud informs its personnel about relevant security procedures for their respective roles, as well as of possible consequences of breaching the security rules and procedures. Such consequences include disciplinary and/or legal action.

  • PlaytestCloud reviews and updates their data privacy and security guidelines every 6 months.

Did this answer your question?