Cloud datacenter security

Data security

Data is encrypted, both at rest and in transit, using industry-leading encryption standards. 12Build uses a top-level disaster recovery environment to control protected information.

Security notifications

You will receive an email notification when changes are made to your login details, email address or two-step verification. You will also receive an email when you log in from a device or location you have not previously logged in to before.

Endpoint security

An additional organization unit has been created for 12Build employees who manage critical data. The organization unit '12B High Security' will be applied to these users. Several additional mobile device management rules, such as longer account password, mandatory MFA, and strong password option on mobile will apply to this organization unit.

Business continuity and disaster recovery

12Build has a Business Continuity Policy, which requires that the Business Continuity Plan (BCP). Tests and procedures are updated and implemented at least annually. In addition to backups, we also use an air-gapped disaster recovery environment.

Bug bounty program

12Build operates a bug bounty program that enables a large pool of security researchers to test our platform on an ongoing basis.

Penetration testing

12Build contracts with leading penetration testing vendors to subject our production architecture to more detailed and formal testing at least once a year.

Single sign-on (SSO)

When a user connects to 12Build, they use a web browser over an enhanced Transport Layer Security (TLS) 1.2 or higher connection. The 12Build platform supports federated access via SSO by enabling any number of Identity Providers (IdP).

Staff security

Security starts with the people 12Build employs. We conduct security briefings with all new employees and also have an active awareness program throughout the year.

Data privacy

Privacy is essential to our customers and we take this very seriously. 12Build does not sell, share or export your data to third parties that we collect by using our platform for our own purposes. We only provide data to our sub-processors to support the processing of your data as set out in your customer agreement.

Data recovery

We make regular backups of your data. Relational marketplaces in AWS RDS are used to store this data. A replica contains exactly the same data as a master and should be able to be used to replace the master in case of failure. A master and replica instance should always be spread across different availability zones.

Transparent system status

12Build continuously monitors uptime and makes system status public. View system status.