Origin

Your data security is important to us

Origin processes confidential business information for enterprise companies. Our customers rely on us to protect their data and their systems.

Certification

ISO 27001 certified organisation

Infrastructure

Hosted on AWS, within a segregated VPC

Data hygiene

Non-essential data removed after 90 days

As an ISO27001 certified organisation, we have developed a comprehensive set of practices and policies to ensure the security of your data.

Application Security

  • Origin's web applications use encrypted communication
  • Origin's API's use industry standard authentication
  • Origin's offers secure options for data exchange, these include SSH tunnels and SSL/TLS encryption.
  • Origin's integrations use the minimum permissions that are required to access the data they require.

Environment

  • Origin's servers are hosted in Amazon Web Services, which provides assurances for their physical and virtualized computing environments including SOC 1, 2, and 3, and ISO/IEC 27001.
  • Origin operates within an Amazon Virtual Private Cloud (VPC), with subnets segregated by security level, and firewalls configured to restrict network access.
  • Origin performs frequent pen testing and regular security updates.

Our Practices

  • All staff are trained in keeping data safe and mandates policies that protect data
  • We monitor application logs, system logs, data access logs for unusual behaviour and have alerts in place based on these monitors
  • All staff are background checked
  • Our extensive security policy documents our procedures for handling incidents, which includes notifying our customers in the event of a verified breach.
  • All passwords and access tokens are encrypted
  • All non-essential data is removed after 90 days

Security is a two-way street.

While we continuously focus on doing our part to maintain high standards for security and complying with regulations, you also have a role to play in helping to ensure the security of your data. As a data connectivity tool, our customers connect to a number of organisations and other parties are responsible for their own data security.

Compliance and Regulations

Talk to us today