Truva - Trust Center - Security & Privacy

Truva recognises that the confidentiality, integrity and availability of information and data created, maintained and hosted by us are vital to the success of the business and privacy of our partners.

As a service provider/product, we understand the importance in providing clear information about our security practices, tools, resources and responsibilities within Truva so that our customers can feel confident in choosing us as a trusted provider.

This Security Posture highlights high-level details about our steps to identify and mitigate risks, implement best practices, and continuously develop ways to improve.

Compliances (1)

SOC 2

Compliant

Controls

Continuously monitored

Product security (1)

Situational Awareness For Incidents

Data security (7)

Identity Validation

Multi-factor Authentication

Encrypting Data At Rest

Network security (5)

Limit Network Connections

External System Connections

Anomalous Behavior

App security (6)

Conspicuous Link To Privacy Notice

Secure system modification

Approval of Changes

Endpoint security (5)

Malicious Code Protection (Anti-Malware)

Full Device or Container-based Encryption

Endpoint Security Validation

Corporate security (28)

Code of Business Conduct

Roles & Responsibilities

Competency Screening

Resources (43)

Access Control Procedure

Access Control Procedure establishes a comprehensive framework for managing user access and controlling access to assets and information systems both within and outside the organization.

Asset Management Procedure

Asset Management Procedure outlines a systematic approach for maintaining, handling, and protecting all information assets in line with internal and external security requirements related to the business

Access Control Policy

Access Control Policy ensures that access to company assets is controlled based on business and security requirements.