Welcome to Astrello's Trust Center. This portal is designed to provide you with a clear and accessible overview of our commitment to security and trust. Here, you'll find detailed information about how Astrello protects your data and maintains a secure environment for our services.
At Astrello, we prioritize the confidentiality, integrity, and availability of your data. Our robust security posture is built upon a foundation of comprehensive policies and operational practices. We have established a Data Protection Policy that outlines the procedures and technical measures we implement to safeguard data. This includes a Data Classification Policy to identify different types of information and the necessary protection measures for each.
Access to information resources, including sensitive data, is strictly controlled through a Least-Privileged Policy, ensuring that individuals only have access to what is necessary for their roles. Our Access Control Policy further details these requirements. We also employ strong cryptographic techniques, managed through an established key management process, and guided by our Encryption Policy and Cryptography Policies.
To maintain the integrity of our systems, Astrello has a Change Management Policy that governs changes to infrastructure, systems, and applications. Furthermore, our databases are continuously monitored, and appropriate personnel are notified of any incidents based on predetermined criteria, with escalations handled according to policy.
This Trust Center serves as a central hub for understanding our security practices in detail. We invite you to explore the various sections to learn more about our dedication to maintaining a secure and trustworthy environment.
Risk Profile
We have secure, reliable hosting that customers can depend on. We are happy to provide details about our risk mitigation practices and recovery objectives upon request.
Reports
We may provide security-related reports upon request.
Self-Assessments
We are working on our security compliance. We can provide completed questionnaires upon request.
AI
We take the usage of AI seriously in our organization and work to ensure security and reliability of the AI.
ESG
We prioritize and take environmental, social, and governance (ESG) considerations seriously in our operations and decision-making processes.
Legal
We take legal matters seriously and we always engage our legal counsel to review all commercial activities. Please contact us if you have any questions.
Security Grades
We are constantly monitoring the security of our website. We will post our grades from public security rating agencies when they become available.
Training
We provide security awareness training to all employees to ensure that they are aware of security best practices.
