Security
We are committed to maintaining the highest level of data security. We ensure your data is safeguarded with state-of-the-art encryption methods during storage and transmission. To reinforce our commitment to secure environments, AIVF employs rigorous administrative and technical controls, including SAML SSO and 2FA, providing comprehensive protection across the organization.
Application Security
AIVF implemented cryptographic controls to ensure the confidentiality, integrity, and authenticity of personal data and other sensitive data.
AIVF ensures all login pages use TLS with certificates from trusted Certificate Authorities. Data is encrypted in transit via TLS over HTTPS (Hypertext Transfer Protocol Secure) and at rest with AES 256-bit encryption. Static analysis is built into our development process to detect software flaws. Dynamic analysis identifies security issues in running applications using OWASP and SANS/CVE standards.
AIVF ensures all login pages use TLS with certificates from trusted Certificate Authorities. Data is encrypted in transit via TLS over HTTPS (Hypertext Transfer Protocol Secure) and at rest with AES 256-bit encryption. Static analysis is built into our development process to detect software flaws. Dynamic analysis identifies security issues in running applications using OWASP and SANS/CVE standards.
Data Security on AWS Cloud
AIVF products run on Amazon Web Services (AWS), which complies with various industry standards such as PCI DSS, SOC 1/2/3, ISO 27002 & ISO 279001, FISMA, HIPAA, and FedRAMP.
While AWS manages security configurations for its services, AIVF takes charge of advanced security tasks such as encryption, data management, and access control to ensure top-tier security.
While AWS manages security configurations for its services, AIVF takes charge of advanced security tasks such as encryption, data management, and access control to ensure top-tier security.
Business Continuity Management
Continuity and recovery plans are in place to minimize any disruption to our service in the event of a crisis or disaster. We developed and implemented processes, procedures, and controls to maintain business continuity. These plans are periodically verified, reviewed, and tested to ensure their validity and effectiveness. Information processing facilities are equipped with redundancy and high availability techniques to meet availability requirements for all AIVF’s operations.
Backup and Recovery
AIVF regularly creates and tests backup copies of information, software, and system images in line with our backup strategy and policies. Backup copies are protected with access and cryptographic controls. Periodic recovery testing validates the integrity of backups and verifies the duration of the recovery process.