Astrello Logo

Trust Center

Start your security review
View & download sensitive information
Ask for information
ControlK

Overview

Welcome to Astrello's Trust Center. This portal is designed to provide you with a clear and accessible overview of our commitment to security and trust. Here, you'll find detailed information about how Astrello protects your data and maintains a secure environment for our services.

At Astrello, we prioritize the confidentiality, integrity, and availability of your data. Our robust security posture is built upon a foundation of comprehensive policies and operational practices. We have established a Data Protection Policy that outlines the procedures and technical measures we implement to safeguard data. This includes a Data Classification Policy to identify different types of information and the necessary protection measures for each.

Access to information resources, including sensitive data, is strictly controlled through a Least-Privileged Policy, ensuring that individuals only have access to what is necessary for their roles. Our Access Control Policy further details these requirements. We also employ strong cryptographic techniques, managed through an established key management process, and guided by our Encryption Policy and Cryptography Policies.

To maintain the integrity of our systems, Astrello has a Change Management Policy that governs changes to infrastructure, systems, and applications. Furthermore, our databases are continuously monitored, and appropriate personnel are notified of any incidents based on predetermined criteria, with escalations handled according to policy.

This Trust Center serves as a central hub for understanding our security practices in detail. We invite you to explore the various sections to learn more about our dedication to maintaining a secure and trustworthy environment.

Documents

COMPLIANCEHIPAA

Risk Profile

We have secure, reliable hosting that customers can depend on. We are happy to provide details about our risk mitigation practices and recovery objectives upon request.

Reports

We may provide security-related reports upon request.

Self-Assessments

We are working on our security compliance. We can provide completed questionnaires upon request.

AI

We take the usage of AI seriously in our organization and work to ensure security and reliability of the AI.

ESG

We prioritize and take environmental, social, and governance (ESG) considerations seriously in our operations and decision-making processes.

Legal

We take legal matters seriously and we always engage our legal counsel to review all commercial activities. Please contact us if you have any questions.

Security Grades

We are constantly monitoring the security of our website. We will post our grades from public security rating agencies when they become available.

Training

We provide security awareness training to all employees to ensure that they are aware of security best practices.

Built onSafeBase by Drata Logo