Data-center Protections

Physical security

Optotax products are hosted on cloud infrastructure platforms that hold SOC 2 Type II and ISO 27001 certifications, among other credentials. These certifications ensure robust security measures, including dedicated security personnel, stringent physical access controls, and comprehensive video surveillance.

Patch management

Optotax’s patch management process identifies and resolves missing patches in the product infrastructure, ensuring software packages are up to date through server-level instrumentation.

Security incident response

Optotax’s security incident process flows, and investigation data sources are pre-defined through regular preparation activities and refined via follow-ups. We use standard incident response structures to ensure timely and appropriate actions.

Application security

In-transit encryption

Sessions are protected with in-transit encryption using 2,048-bit or stronger keys and TLS 1.2 or higher. This ensures data integrity and confidentiality by encrypting data before transmission, authenticating endpoints, and verifying data integrity upon arrival.

Web application and network firewalls

Optotax utilizes a comprehensive suite of tools to monitor potential attacks, including a web application firewall and a network-level firewall. Additionally, the platform incorporates Distributed Denial of Service (DDoS) prevention measures to protect and ensure uninterrupted access.

Software Development Lifecycle (SDLC) Security

Optotax ensures consistent software quality through static code analysis tools and human review processes. Our secure coding practices adhere to OWASP guidelines, and we conduct biannual application security assessments with third-party vendors. Additionally, Optotax performs Software Composition Analysis (SCA), generates Software Bill of Materials (SBOM), and utilizes Infrastructure as Code (IAC).

Audits, Vulnerability Assessment & Penetration Testing

Vulnerability assessment

Optotax conducts quarterly vulnerability assessments on the network infrastructure to identify and mitigate potential security risks. These assessments ensure that our systems remain secure and compliant with industry standards.

Penetration testing

Optotax employs third-party penetration testing firms to conduct thorough security assessments of its products and infrastructure, ensuring the protection of customer data and systems.

External audit & certification

Optotax ensures compliance through regular external audits and certifications, demonstrating its commitment to security and operational excellence.

Resiliency and Availability

99.9% Uptime

Optotax consistently maintains a high availability rate of 99.9%, ensuring uninterrupted access to its services. Customer data is comprehensively protected through redundant online backups and regular snapshots, providing robust disaster recovery capabilities.

24x7x365 monitoring

Optotax employs proprietary and industry-standard tools to monitor application, software, and infrastructure performance.

Data Center Redundancy

Optotax employs redundant failover systems to mitigate the impact of single points of failure, ensuring uninterrupted service continuity.

Disaster Recovery

Optotax maintains comprehensive data recovery procedures and robust application code backup strategies to ensure rapid restoration in the event of a data loss incident. Our point-in-time recovery capability allows us to restore data to any specific point within the last 35 days, minimizing downtime and business disruption.

Data Privacy and Data Access

Restricted access to databases and data storage

Access to databases and data storage systems is strictly controlled and restricted to authorized executives within the organization.

No local or on-premises storage of data

Optotax utilizes Amazon AWS cloud infrastructure, with each environment operating within its own private network. We do not store customer information on any local or on-premise infrastructure, including development and testing environments.

Privacy Policy

Please refer to our privacy policy here: https://www.optotax.com/privacy