Keeping your information safe and secure

Our SaaS solution is hosted in secure ISO 27001 certified data centers on robust infrastructure with load balancing capabilities in North America, Europe, and Australia.

• Hosting
  The 4C Resilience platform is either hosted in 4C’s private cloud, or by a public cloud provider such as Microsoft Azure. The 4C private cloud infrastructure is built with multi-layered security measures, including encryption, advanced threat detection, continuous monitoring, and high-availability architecture that safeguard your sensitive data against evolving cyber threats and ensures your business-critical data is always accessible. Read more about infrastructure security at Azure which we use for hosting in North America and Australia.
• Facility Security
  Hosting facilities include redundant components for independent power, cooling, and networking, and concurrent maintainability, allowing for planned maintenance without service interruption. Physical controls include fire suppression and surveillance systems, as well as strict access approval at facility’s’ perimeter, buildings’ perimeter and inside buildings. Read more about facility security at Azure.

• Data in Transit
  All client data is encrypted at industry standards encryption. Data in transit is encrypted at TLS v1.2 or above as supported by clients.
• Data at Rest
  Data at rest is encrypted with at least AES256 encryption algorithms.

• Controlled Access
  For private data centers access to production environments is limited to authorized personnel with a valid “need-to” operational requirement. All access is logged and utilizes multi-factor authentication for enhanced security.
• Network Segmentation
  Services are organized into separate trust zones based on their level of sensitivity, with minimal inter-zone traffic to reduce risk.
• DDoS Attack Mitigation
  Comprehensive measures are implemented to detect and manage denial-of-service (DDoS) attacks, to uphold system availability.
• Application Traffic Protection
  A Web Application Firewall (WAF) is in place to shield incoming traffic from vulnerabilities, including threats such as SQL injection and cross-site scripting (XSS).

• Operational Oversight
  We continuously monitor essential service metrics and server logs to identify, prevent, and respond to potential service disruptions.
• Redundancy
  Hosted data is securely replicated between regions or data centers ensuring high-availability and rapid recovery in any crisis scenario.
• Service Availability Updates
  4C provides real-time updates on scheduled maintenance and service disruptions to designated customer points of contact using agreed channels.
• Business Continuity
  As a provider of continuity software and services we have comprehensive plans and processes in place to manage major disruptions and emergency events. Our plans are regularly tested and updated to ensure effectiveness.
• Data Backup & Retention
  Data is automatically backed up every 24 hours and stored for a minimum of 3 months with an option to extend retention to 365 days. Backups are moved to safe storage using either offline or immutable functionality.