Security & Data Protection

Noder360 applies security controls appropriate to its services without claiming that any system is completely immune from risk.

Core controls

• Encrypted web connections where supported
• Role-based access controls
• Administrative access restrictions
• Audit/activity records in supported modules
• Backup options
• Secure credential practices
• Security monitoring and incident response processes
• Infrastructure and application updates according to operational requirements

Customer controls

Customers should use strong passwords, enable available account protections, review user permissions, remove inactive users and protect endpoint devices.

Incident handling

If a material security incident affecting customer data is confirmed, Noder360 will investigate, contain and communicate as appropriate based on the nature of the incident and applicable obligations.

Data processing

Customer data is processed to provide subscribed services, support operations, maintain security and meet contractual/legal obligations. Third-party infrastructure providers may process data where necessary to deliver the service.