To make sure nobody gets unauthorized access to data in HRMTS applications we make sure we are handling them in a secure way.
Data in transit
- Data is always transported over HTTPS between HRMTS services and the users browsers or apps.
- The system support authentication and authorization with user access roles.
- SAML/OpenIdConnect support through our HRID for all customers that wants this for authentication.
- SHA256 encryption is used for machine to machine communication
Data at rest
- Database servers are not connected to internet and can only be accessed by the application within a closed network at Telecomputing
- Server disks are not encrypted as they are physically protected by Telecomputing following ISO27001 standards
- Database backups are password protected
- Keys and certificates are handled by our data center provider, Telecomputing following ISO27001 standards
- Hard disks and server management and termination are handled by our data center provider, Telecomputing following ISO27001 standardsÂ