Certifications
- Be Software International is certified by Intertek SAI Global for the provision of the cloud-based iinsight SaaS product:
- ISO/IEC 27001:2022 (Information Security Management Systems) – certificate ITGOV40031
- ISO 9001:2015 (Quality Management Systems) – certificate QMS43862
At iinsight, we understand the importance of data protection and security for our customers. iinsight is hosted on Amazon Web Services (AWS). Production customer data is hosted in the AWS region serving your country and replicated across availability zones within that region. Our infrastructure provides redundancy at the software, hardware and data centre level. Support service levels, including target response times, are set out in the customer agreement.
Complimentary assistance from our compliance team!
iinsight® often has clients who are approached by their various funding bodies. These funding bodies request certain documents and information, such as auditability, due diligence, and security questionnaires, to be completed and returned by a specified deadline.
The Due Diligence and Security Questionnaires that the funding bodies request often contain technical questions related to client data, its storage, and the security measures in place to protect that data. These questionnaires likely seek detailed information about how the client's data is handled, stored, and safeguarded to ensure compliance with data protection regulations and to address any potential risks or vulnerabilities.
To make this process easier for providers, iinsight® offers a complimentary service to its customers. You can simply contact our compliance team, who will help you complete the sections relevant to iinsight®. The best part is that this service comes at no additional cost to our customers.
- Data hosting and backups
We partner with Amazon Web Services (AWS). Production customer data is hosted in the AWS region serving your country, replicated across availability zones to support availability and resilience.
- Database backups
Customer databases are backed up continuously with point-in-time recovery, and recovery points are retained for 35 days.
- Document backups
Customer documents and files are backed up hourly.
- Data Encryption
The security of your data is paramount to us. All communication with the iinsight® platform is encrypted in transit using TLS 1.3 where supported, with TLS 1.2 as the minimum. Customer databases are encrypted at rest using AWS Key Management Service.
- Privacy and customer separation
Each organisation on the iinsight® platform has its own dedicated database and document repository, logically isolated from every other customer. Personal information is handled in line with the UK GDPR and the Data Protection Act 2018, under the policies and procedures of our ISO/IEC 27001 and ISO 9001 certified management system.
- Monitoring
The platform is monitored continuously by automated monitoring and alerting, with a defined escalation path to our infrastructure team. AWS web application firewalls and load balancers block access from suspicious IP addresses.
Independent penetration testing
Regular Security Assessments
We engage independent specialists to test our security. A web application penetration test is commissioned at least every 12 months and after any significant change to the platform, and findings are tracked through to remediation.
Additionally, we leverage third-party automation software that performs deep code scans automatically on every build, and each release is tested for vulnerabilities before it goes live.
