Security

Effective as of April 9, 2022.

Security and Privacy at Verta

Verta’s pending SOC 2 report verifies the existence of internal controls, which have been designed and implemented to meet the requirements for the security principles set forth in the Trust Services Principles and Criteria for Security. It provides a thorough review of how Verta’s internal controls affect the security, availability, and processing integrity of the systems it uses to process users’ data. It also provides confidentiality and privacy of the information processed by these systems. This independent validation of security controls is crucial for customers in highly regulated industries.

SOC2 Certification

We are completing the Service Organization Control (SOC) 2 Type 1 audit, which affirms that information security practices, policies, procedures, and operations meet the SOC 2 standards for security, availability, and confidentiality.

Physical Security

We are exclusively hosted on AWS, a leader in physical data center security and controls. AWS takes care of maintenance, access monitoring, intrusion detection, environmental concerns, and asset management.

Network Security

By default, the Verta application and other deployments created via Verta are accessible via the public internet through a Load Balancer. Moreover, the access to these resources is secured with authentication proxies. The configuration can also be modified to only be accessible via AWS’s internal network or from a restricted set of IPs.

Software Security

Verta scans application code and containers regularly, including static analysis and container scans via Snyk, AWS Inspector and SonarCloud. We’ve also established a set of guidelines to maintain ongoing security as we continue to improve, update, and expand our software offering.

Encryption

All communication at the boundary of the Verta system is encrypted using TLS standards with certificates signed by well respected CAs wherever possible. All data, including Amazon Elastic Block Store (EBS) volumes and Amazon S3 buckets, is encrypted at rest using AWS Key Management Service (KMS).

How to contact us

Email: security@verta.ai
Mail: 405 El Camino Real Suite 441, Menlo Park, CA 94025
Phone: +1 408-673-0658