...
Access to the hosts running the app is limited to the development and the infrastructure team using a PPK mechanism
There are contractual NDA's in place for all employees and contractors of Everit
Standard Linux audit logging is enabled (history) and reviewed on a regular basis
Everit uses Amazon AWS for hosting Cloud apps to comply with all local laws. AWS has numerous security certifications and Everit implements many further security controls to safeguard data. AWS has numerous monitoring and alert tools that we are using.
Other details are described in our Data security and Privacy policy
4. Release management
Do you have formal change control and release management processes to manage code changes?
...