Security and compliance

Infoveave is built on a strong foundation of security & compliance. The platform aligns with key compliance standards and includes built-in help resources for ease of use.

CATEGORY	DETAILS
Authentication	• BCrypt-based one-way password encryption. • Two-step password reset process. • User lockout on multiple invalid login attempts. • Multi-factor authentication. • Integration with Okta and Entra.
Role-based Access Control (RBAC)	• Fine-grained permissions at the application, module, and feature level. • Data context-based access to users. • One-way hashing & reversible encryption at user level to control access to sensitive data.
Audit Log	• Audit logs on user access to various assets and for every action performed. • Version history of queries, workflows, user-entered data, and visual comparison across all versions.
Backup and Disaster Recovery	• Multi-region deployments with automated failover. • Data backup on the cloud and on-premise based on client needs. • Defined and documented business continuity process with annual tests for recovery.
Product Help and Support	• In-app guided feature walkthroughs. • Searchable online product help with video tutorials. • Email-based support.
Compliance and certification	• ISO 27001:2022, SOC2 Type II compliance. • ISO 27701*, ISO 27017*, HIPAA*, CCPA*, GDPR*. • CERT-IN Certified Vulnerability & Penetration Tested. • EcoVadis rated as ‘Committed’ for sustainability.