Security Statement
Keeping our customers, partners and employees safe and secure is our top priority.
We enact this through a wide programme of security activities, including:
- Embracing best-of-breed cloud technologies, primarily in Microsoft Azure.
- Using a range of security-centric tools, technology and architecture, pen testing, code analysis, application firewalls, subnets, VPNs, encryption in transit and at rest, MFA, robust access policies and more.
- Hiring highly experienced and skilled people who understand and respect security.
- Vetting all personnel to a minimum of BPSS standard (or international equivalent).
- Keeping our local devices secure using advanced endpoint management technologies.
- Ensuring all team members undertake monthly security training.
- Segregating our production and non-production environments and operating all systems on the principle of least privilege.
- Having dedicated security personnel and teams.
Vulnerability Disclosure Policy
We take the security of our software and services very seriously. If you have a security concern or wish to report a vulnerability, please contact support@iamcloud.com. Your case will be provided to our Security team for investigation and follow-up.
We ask that you supply:
- A clear description of the issue and the impact you believe it could have.
- Steps to reproduce, including any proof-of-concept code, screenshots or video.
- Your contact details so we can follow up with you directly.
Once received, we'll validate the issue before taking steps to remediate. Summary detail on fixes will be published as part of our version release notes. You'll be individually informed of progress via our Support team.
ISO 27001
ISO 27001 is a globally recognised Information Security Management System (ISMS) standard. IAM Cloud originally obtained ISO certification back in 2016 and are proud to have retained certification for compliance with ISO/IEC 27001:2013 and latterly 27001:2022 ever since.
Our current certificate is available on request, please contact contact@iamcloud.com.
Product security
Cloud Drive Mapper's product specification, including a range of aspects surrounding its security and compliance with data protection regulations, is covered on the CDM knowledge base: cdm.iamcloud.info.