Code AnalysisWe use static analysis tools on every change we make to detect any potential security vulnerability in our source code.Secure Development PracticesWe follow secure coding standards such as OWASP, utilises SAST and dependency chain scanning, perform regular code reviews and provide annual security training for our development team to ensure strong security first practices and minimise security risks.Privacy PolicyOur privacy policy can be found on our website - Privacy Notice Policy

App Security

Access MonitoringWe log and monitor data access across our systems and audit for unusual activity.BackupsData backups of both our corporate data and customer cloud data are performed regularly to ensure business continuity and protect against data loss. We test our backups on an annual basis.EncryptionAll data, both at rest and in transit, is encrypted using industry-standard encryption algorithms.Physical SecurityWe are a cloud first business, leveraging Microsoft Azure. Microsoft's data centers secured with physical access control and surveillance.

Data Security

Data AccessWe use the principles of least-privilege and perform regular user access reviews to ensure team members only have access to what they need.Password SecurityWe enforce strong password policies, including complex password requirements, across our services and require regular password changes.

Access Control

Disk EncryptionAll our devices have full disk encryption enabled.Threat DetectionWe utilise advanced detection tools across our local environment and cloud services to detect threats and suspicious activity.

Endpoint Security

Real time security and events managementWe use a SIEM to detect real team security events.Zero Trust

Network Security

Employee TrainingWe train our staff on an annual basis regarding IT security and additionally, roles such as the development team receive additional specialist training as per the requirements of their role.Incident ResponseWe have a well defined cyber incident response plan and do annual run throughs to ensure staff preparedness.User Account ProtectionWe use measures like Multi Factor Authentication to protect our user accounts.Penetration TestingWe perform annual penetration testing with independent third parties.

Corporate Security

Cloud Infrastructure ProviderOur cloud infrastructure is provided by Microsoft Azure.Business Continuity and Disaster RecoveryWe have a robust business continuity and disaster recovery plan and test these on an annual basis.Infrastructure SecurityOur infrastructure is secured with multiple layers of protection to protect our systems and data.Separation between Production and non-productionOur production environment is strictly separate from our development, test and non-production environments.

Infrastructure

Pen Test ReportWe undertake annual penetration testing with an independent third party as part of our ongoing commitment to security.Architecture DiagramWe maintain an up to date architecture diagram that may be requested by appropriate third parties.CertificationsWe are ISO 27001:2022 certified and our certificate can be downloaded from this portal or viewed here.

Reports

Audit LoggingThe 12d Synergy platform logs user and administrative actions, which may be retrieved via the administrative portal. Additionally, we maintain additional logs at an infrastructure level that we audit on a regular basis for unusual activity.Multi Factor AuthenticationOur product provides Multi Factor Authentication to enhance security.Role Based Access Control12d Synergy supports a robust and varied set of permissions to allow RBAC and a least-privileged approach to access.SSO support12d Synergy provides SSO Support through integration with Microsoft Entra ID.

12d Synergy Pty Ltd Trust Center

Documents

Security Controls