Analytics 2.0 - Mesures de sécurité

Chez Procore, nous prenons au sérieux la protection des données de nos clients et avons mis en place de nombreuses mesures de sécurité pour atteindre cet objectif. Dans un esprit de transparence, certaines de ces mesures sont décrites ci-dessous.

Analytics 2.0 implements a layered data security approach. The following security measures are in place:

• Transport Layer Security. All data in transit to the delta share server is secured and encrypted via TLS 1.2+.

• Data Encryption. The data is encrypted using Amazon’s Key Management Service [KMS], and stored in Amazon’s object storage [S3]. AWS KMS performs real-time encryption and decryption of the data.

• Short lived credentials. All connection attempts are done via open secured sharing protocol with short lived credentials options using pre-signed URLs.

• Authentication. All credentials are secured through tokens and shares, utilizing a secured shared server that can access only the specific data dedicated to each company.

• Auditing. All actions are recorded and audit logs are stored for tracking database activity.

• Threat Observability. Procore security teams utilize an observability dashboard to detect and respond to unusual data activity.

Procore a un objectif de niveau de service de 99,9 % pour la disponibilité de ses services. Les personnes peuvent e-mail sécurité@procore.com pour toute préoccupation ou question spécifique à la sécurité, ou pour identifier des vulnérabilités spécifiques.