Enterprise-Grade Security
Through our work in highly regulated sectors, Verostone has first-hand knowledge of the compliance landscape in which enterprises operate. Our systems adhere to the highest security standards, protecting customers’ sensitive data, whether stored in the cloud or on premise:
- Native single sign on integrated with Microsoft Active Directory, LDAP and SAML directories, including compatibility with multi-factor authentication
- Data in transit is compressed and encrypted via a 256-bit SSL certificate. The connection uses TLS 1.2 encrypted using AES_256_CBC, with HMAC-SHA1 for message authentication and ECDHE_RSA as the key exchange mechanism
- Data at rest is encrypted using a symmetric key with AES and 3DES encryption algorithms
- A single security model for all users accessing every interface and function across the platform
- A robust built-in security manager to configure all access to data, modules and elements of the system
- Common user permissions may be consolidated into roles, with the ability to assign users to multiple roles
