Cloud Services & Security
Task Analytics uses Google Cloud Platform services, which are complying with EU data protection laws The Google Cloud Platform undergoes several independent third-party audits on a regular basis to provide verification of security, privacy and compliance controls.
- ISO 27001 (Information Security Management)
- ISO 27017 (Cloud Security)
- ISO 27018 (Cloud Privacy)
- SSAE16 / ISAE 3402 (SOC 2/3)
Server Security
Connection with our server is made via a secured TLS 1.2 HTTP Connection. Database backups are encrypted before being stored in a separate data center location. Encryption keys are rotated every 90 days and backups are automatically deleted after 30 days.
Task Analytics hardens each host in GCP (for our database) and routinely apply patches to both the OS and the database software. Access is restricted to only those requiring operational access. We encrypt and store secrets (e.g. database password), leverage jump hosts for SSH access to hosts, and rely on Google's IAM framework and OS login to manage and log who accesses what.