Security & Compliance on Cloud Elements API Integration Platform

Cloud Elements Platform Security & Compliance

We know how critical your data is to you and that you rely on Cloud Elements to keep it secure.

Cloud Elements is an API Integration Platform as a service, providing robust, low-latency, API- based integration for clients with the most stringent of security requirements. In order to meet and exceed the trust required to provide API integration and mediation, Cloud Elements sets a high bar for adhering to common security standards and practices and is ISO 27001 certified and SOC 2 Type II compliant. The Cloud Elements infrastructure is hosted on Amazon AWS and has been deemed SSAE 16 Type II SOC 1, 2 & 3 compliant as per the audit requirements of the American Institute of Certified Public Accountants.

Please email us at security@cloud-elements.com for more detailed information about our security measures.

Security

Security is always a concern when dealing with client information in the cloud. We understand that, which is why Cloud Elements has security at the forefront of our thoughts as we architect our solutions.

Network Security

Cloud Elements maintains the highest level of security monitoring of our networks with the ability to scale and innovate while maintaining a secure environment. Our security team leverages AWS data centers and network architecture built to meet the requirements of the most security-sensitive organizations. We utilize industry-leading solutions for intrusion detection, file integrity, vulnerability scanning, and multi-factor authentication.

Solution Security

At Cloud Elements, we use normalized APIs to connect to many endpoints (like Dropbox, Salesforce, Jira, etc.), Cloud Elements opens a connection with the endpoint and streams the information directly to our client’s application. Cloud Elements does not persist (store) any of the pass-through data from the services. All transmissions on both sides use HTTPS with the highest quality ciphers available. All sensitive and personal information Cloud Elements does store is secured using a complete 256 bit AES encryption scheme.

Application Security

Cloud Elements Veracode application security program is an integral part of our Security program that delivers secure solutions. Veracode delivers the application security solutions and services today’s software-driven world requires. Veracode scans all applications and components you build or buy, covering all major languages, frameworks and application types. Veracode’s unified platform assesses and improves the security of Cloud Elements API’s from inception through production so that businesses can confidently innovate with applications they build, buy and assemble as well as the components they integrate into their environments.
Cloud Elements is hosted at highly secure cloud hosting centers, such as Amazon EC2. These ensure the highest levels of security compliance at our hosting facilities.
Read more about Amazon EC2.

Compliance Certifications

SOC 2

SOC 2 Type 2 report is designed to allow service organizations to communicate information about their system description in accordance with specific criteria related to availability, security and confidentiality.

COALFIRE ISO 27001 Certification Logo ISO 27001 is a widely-adopted global security standard outlining the requirements for information security management systems and provides a systematic approach to managing company and customer information based on periodic risk assessments.

PCI

To ensure consistent standards for merchants, the Payment Card Industry Security Standards Council established Payment Card Industry (PCI) data security standards. These standards incorporate best practices to protect cardholder data, and they often require validation from a third-party Qualified Service Assessor (QSA).

GDPR

Adopted in 2016, and enforceable on May 25, 2018, Global Data Privacy Regulation (GDPR) is the most significant piece of European data protection legislation that requires companies conducting business in the European Union (EU) to adopt a very different approach to data privacy. Many organizations that had few or no compliance responsibilities under the previous Directive (1995) have new or increased obligations under the GDPR. Here at Cloud Elements, Data Privacy is a primary focus of our Security efforts in ensuring that any sensitive information processed by our APIs and API orchestrations is protected. Please email us at security@cloud-elements.com for more detailed information.

Safe Harbor

For European customers, Cloud Elements is Safe Harbor compliant with its handling of any personal information. Read more here. A link to the Cloud Elements certification is here.

In summary, Cloud Elements is designed for the most modern, highly scalable software infrastructure designed with security in mind from the ground up. Please email us at security@cloud-elements.com for more detailed information about our security measures.