Pregled varnosti

All data in transit is encrypted using TLS 1.2 or higher. Data at rest is encrypted with AES-256.

• Managed encryption keys via AWS KMS with automatic annual rotation.
• Row-level tenancy isolation on the primary database.
• Signed URLs with short TTLs for object storage access.

Workspace administrators can enforce:

• Role-based permissions (Owner, Admin, Member, Guest).
• Session lifetime and idle timeout policies.
• Domain-restricted signup and enforced 2FA.
• IP allowlists on Enterprise plans.

Enterprise plans include SAML 2.0 SSO with Okta, Azure AD, Google Workspace, and any OIDC-compliant provider. SCIM 2.0 automates user provisioning and de-provisioning.

Production systems emit structured audit logs that are retained for 400 days. Anomaly detection runs on authentication events, admin actions, and API usage. Alerts route to our 24/7 on-call rotation.

Digisto izvaja dokumentiran načrt odzivanja na incidente z rednimi preverjanji. Potrjeni incidenti, ki vplivajo na podatke strank, se sporočijo v najkrajšem možnem času.

Poročila o incidentih so objavljena na strani stanja sistema.

Redno preverjamo skladnost naših zunanjih ponudnikov (npr. SOC 2, ISO 27001). Trenutni seznam je na voljo na naši strani zaupanja.

Pozdravljamo poročila neodvisnih varnostnih raziskovalcev. Prosimo, pišite nam na varnost@digisto.si z opisom in koraki za ponovitev.

Obvezujemo se k potrditvi prejema veljavnih poročil v roku 3 delovnih dni.