trust centre

Trust and integrity is everything to us

Zai Node recognises that the confidentiality, integrity and availability of information and data created, maintained and hosted by us are vital to the privacy of our stakeholders.

We understand the importance in providing clear information about our security practices, tools, resources and responsibilities within Zai Node so that our clients and users can feel confident in choosing us as a trusted provider.

This Security Posture highlights high-level details about our steps to identify and mitigate risks, implement best practices, and continuously develop ways to improve.

ISO 27001 Compliant

SOC 2 Compliant

GDPR Compliant

Controls

Product security

Production System User Review Situational Awareness For Incidents Vulnerability Remediation Process Audit Logging Data Security Integrations MFA Process Product Architecture Role-Based Access Control SLA

Data security

Access Monitoring Data Backups Data Erasure Encryption-at-rest Encryption-in-transit Geographic Location of Data Physical Security

Network security

Firewall Spoofing Protection Virtual Private Cloud Web Application Firewall Wireless Security

App security

Conspicuous Link to Privacy Notice Secure system modification Approval of Changes

Endpoint security

Anti-Malware Disk Encryption Mobile Device Management

Corporate security

Asset Management Practices Email Protection Employee Training Incident Response Internal Assessments Internal SSO Penetration Testing

Risk management

Risk Framework Risk Assessments Supply Chain Risk Management Third-Party Dependence

Policies

Upon request

Controls

Product security

Production System User Review Situational Awareness For Incidents Vulnerability Remediation Process Audit Logging Data Security Integrations MFA Process Product Architecture Role-Based Access Control SLA

Data security

Access Monitoring Data Backups Data Erasure Encryption-at-rest Encryption-in-transit Geographic Location of Data Physical Security

Network security

Firewall Spoofing Protection Virtual Private Cloud Web Application Firewall Wireless Security

App security

Conspicuous Link to Privacy Notice Secure system modification Approval of Changes

Endpoint security

Anti-Malware Disk Encryption Mobile Device Management

Corporate security

Asset Management Practices Email Protection Employee Training Incident Response Internal Assessments Internal SSO Penetration Testing

Risk management

Risk Framework Risk Assessments Supply Chain Risk Management Third-Party Dependence

Policies

Upon request

Controls

Product security

Production System User Review Situational Awareness For Incidents Vulnerability Remediation Process Audit Logging Data Security Integrations MFA Process Product Architecture Role-Based Access Control SLA

Data security

Access Monitoring Data Backups Data Erasure Encryption-at-rest Encryption-in-transit Geographic Location of Data Physical Security

Network security

Firewall Spoofing Protection Virtual Private Cloud Web Application Firewall Wireless Security

App security

Conspicuous Link to Privacy Notice Secure system modification Approval of Changes

Endpoint security

Anti-Malware Disk Encryption Mobile Device Management

Corporate security

Asset Management Practices Email Protection Employee Training Incident Response Internal Assessments Internal SSO Penetration Testing

Risk management

Risk Framework Risk Assessments Supply Chain Risk Management Third-Party Dependence

Policies

Upon request