EduVerifi Privacy Policy

• Explanation of the types of data EduVerifi collects through ZOHO Forms.
• Description of how EduVerifi uses the collected data.

Organizational Security

Implementation of an Information Security Management System (ISMS).
Security objectives, risks, and mitigations concerning stakeholders.
Policies and procedures for data security, availability, processing integrity, and confidentiality.

Data Center Security

• Physical security at data centers is maintained by a co-location provider.
• Controlled access, two-factor, and biometric authentication.
• Access logs, activity records, and camera footage for incident investigation.

Monitoring

• CCTV monitoring of entry/exit movements.
• Compliance with local regulations and retention of back-up footage.

Network Security

• Firewalls for unauthorized access prevention.
• Network segmentation and rigorous firewall monitoring.
• Continuous network monitoring by the Network Operations Center team.

Network Redundancy

• Redundant design using a distributed grid architecture.
• Multiple switches, routers, and security gateways for device-level redundancy.

DDoS Prevention

• Technologies from service providers to mitigate DDoS attacks.

Server Hardening

• Hardening of development and testing servers.
• Disabling unused ports/accounts and removing default passwords

Data Security

• Change management policies, secure coding guidelines, and code analyzers.
• Encryption protocols for data in transit and at rest.
• Security framework based on OWASP standards.