Security Program Overview
Copia Automation is dedicated to providing best-in-class security for our customers. We understand that the files stored with us represents important IP, oftentimes critical infrastructure or production processes. As such, we utilize a secure-by-design methodology to create a strong foundation that's reinforced with defense in depth.
Here are some highlights of our security program:
- Compliance. We are SOC 2, Type 2 and SOC 3 compliant.
- Access Controls. We offer our clients the ability to use Single Sign-On (SSO) and/or Multi-Factor Authentication (MFA).
- Encryption. We encrypt all data-at-rest and data-in-transit, as well as backups, by leveraging AWS's cloud solutions.
- Backup & Recovery. Copia's designed to consistency achieve 99.7% availability with a 1 hour Recovery Time Objective (RTO) and Recovery Point Objective (RPO). Backups are testing on an annual basis.
- Auditing. We have Security Information & Event Management (SIEM) to monitor logs from various Copia systems to detect suspicious activity and enable timely response.
- Third-Party Penetration Testing. We perform annual third-party penetration testing on our web applications and API endpoints.
Resources
SOC 2 Type 2
A SOC 2 Type 2 Report is a Service Organization Control (SOC) audit on how a cloud-based service provider handles sensitive information. It covers both the suitability of a company's controls and its operating effectiveness
SOC 3
A System and Organization Controls 3 (SOC 3) report outlines information related to a service organization's internal controls for security, availability, processing integrity, confidentiality and privacy.
Penetration Tests
Copia's annual third-party penetration test results
Copia Policies
Copia's corporate security policies
Monitoring
Subprocessors
![Amazon Web Services](https://secureframe-prod.s3.us-west-2.amazonaws.com/e3qc0g9712pfr7o9vloj5l4beaz9?response-content-disposition=inline%3B%20filename%3D%22download.jpeg%22%3B%20filename%2A%3DUTF-8%27%27download.jpeg&response-content-type=image%2Fjpeg&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAY4JYTU2EJ24YWU7R%2F20240908%2Fus-west-2%2Fs3%2Faws4_request&X-Amz-Date=20240908T000142Z&X-Amz-Expires=604800&X-Amz-SignedHeaders=host&X-Amz-Signature=76d3a9535047ad83ad2c64e2b959a67e4e2805d0f9f79c06455c8b8ac89ce3e2)
Amazon Web Services
AWS serves as our primary cloud hosting solution. It provides secure, scalable infrastructure for storing, processing, and managing customer data.
![Datadog](https://secureframe-prod.s3.us-west-2.amazonaws.com/vxjtgl36i0knu08kh9d98ay8sons?response-content-disposition=inline%3B%20filename%3D%22download%20%25281%2529.jpeg%22%3B%20filename%2A%3DUTF-8%27%27download%2520%25281%2529.jpeg&response-content-type=image%2Fjpeg&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAY4JYTU2EJ24YWU7R%2F20240908%2Fus-west-2%2Fs3%2Faws4_request&X-Amz-Date=20240908T000142Z&X-Amz-Expires=604800&X-Amz-SignedHeaders=host&X-Amz-Signature=4a70e9df557593593c6c0bdbad5db29d247be6a416da743fd0e11978193c51b7)
Datadog
Datadog is a monitoring and analytics platform. It helps us oversee system performance and troubleshoot issues, ensuring a secure and efficient processing environment.
![GitHub](https://secureframe-prod.s3.us-west-2.amazonaws.com/3svw4ufjxkl4u4pngkmxefya8k9m?response-content-disposition=inline%3B%20filename%3D%22download.png%22%3B%20filename%2A%3DUTF-8%27%27download.png&response-content-type=image%2Fpng&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAY4JYTU2EJ24YWU7R%2F20240908%2Fus-west-2%2Fs3%2Faws4_request&X-Amz-Date=20240908T000142Z&X-Amz-Expires=604800&X-Amz-SignedHeaders=host&X-Amz-Signature=e188220d4acba6cc2381ceee2bdf262ed7744277d554f7c05d66da7ac323f18d)
GitHub
GitHub is our code repository platform. It stores and manages the source code for our applications, including versions and change history, helping to track and audit changes.
![Cloudflare](https://secureframe-prod.s3.us-west-2.amazonaws.com/4y7bw33t80hee2a2dgg2s6uireih?response-content-disposition=inline%3B%20filename%3D%22download%20%25281%2529.png%22%3B%20filename%2A%3DUTF-8%27%27download%2520%25281%2529.png&response-content-type=image%2Fpng&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAY4JYTU2EJ24YWU7R%2F20240908%2Fus-west-2%2Fs3%2Faws4_request&X-Amz-Date=20240908T000142Z&X-Amz-Expires=604800&X-Amz-SignedHeaders=host&X-Amz-Signature=bd03096f828ca30c8423a3902f9792c8d0126b1e1fe06c1aa861a48bfc42fc98)
Cloudflare
Cloudflare serves as our web performance and security platform. It provides DDoS protection, SSL encryption, and content delivery, safeguarding our web applications and data.
![Slack](https://secureframe-prod.s3.us-west-2.amazonaws.com/1n974zc2jqi5vfursa7f64271wjy?response-content-disposition=inline%3B%20filename%3D%22download%20%25282%2529.png%22%3B%20filename%2A%3DUTF-8%27%27download%2520%25282%2529.png&response-content-type=image%2Fpng&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAY4JYTU2EJ24YWU7R%2F20240908%2Fus-west-2%2Fs3%2Faws4_request&X-Amz-Date=20240908T000142Z&X-Amz-Expires=604800&X-Amz-SignedHeaders=host&X-Amz-Signature=b15a5d74df395204599e6b31cc93675a2deea62036529af23c079eec3542483a)
Slack
Slack is our internal communication tool. It facilitates real-time messaging and document sharing among team members, aiding in efficient and compliant data sharing practices.
![Google Workspace](https://secureframe-prod.s3.us-west-2.amazonaws.com/fkv88hfpt03tfwd5v3076fr3q3dz?response-content-disposition=inline%3B%20filename%3D%22download%20%25285%2529.png%22%3B%20filename%2A%3DUTF-8%27%27download%2520%25285%2529.png&response-content-type=image%2Fpng&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAY4JYTU2EJ24YWU7R%2F20240908%2Fus-west-2%2Fs3%2Faws4_request&X-Amz-Date=20240908T000142Z&X-Amz-Expires=604800&X-Amz-SignedHeaders=host&X-Amz-Signature=57fb0e6c164ef6306f929ab17c05d969b4fe5e9f5a46512e0f934fd8487ed131)
Google Workspace
oogle Workspace serves as our e-mail and document storage provider. It offers secure, cloud-based platforms like Gmail and Google Drive, enabling efficient communication and document management in compliance with data regulations.
![WorkOS](https://secureframe-prod.s3.us-west-2.amazonaws.com/jhyfekhzya5ddxm5ppg9oilb7q7j?response-content-disposition=inline%3B%20filename%3D%22download%20%25286%2529.png%22%3B%20filename%2A%3DUTF-8%27%27download%2520%25286%2529.png&response-content-type=image%2Fpng&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAY4JYTU2EJ24YWU7R%2F20240908%2Fus-west-2%2Fs3%2Faws4_request&X-Amz-Date=20240908T000142Z&X-Amz-Expires=604800&X-Amz-SignedHeaders=host&X-Amz-Signature=faac535e6abe7cebc5b6c612281151e7e3b5733ea90c32c46d3429e9dec9a925)
WorkOS
WorkOS serves as our solution that enables Copia to provide SSO for our customers
![Rippling](https://secureframe-prod.s3.us-west-2.amazonaws.com/0jkuxv76tkprk6axk3gxquwhsvuw?response-content-disposition=inline%3B%20filename%3D%22download%20%25287%2529.png%22%3B%20filename%2A%3DUTF-8%27%27download%2520%25287%2529.png&response-content-type=image%2Fpng&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAY4JYTU2EJ24YWU7R%2F20240908%2Fus-west-2%2Fs3%2Faws4_request&X-Amz-Date=20240908T000142Z&X-Amz-Expires=604800&X-Amz-SignedHeaders=host&X-Amz-Signature=e7aab224e5b8a2a5ccb073d5c992431576c81571e17f30328abff6ae81130246)
Rippling
Rippling is Copia's Human Resource Information System (HRIS), Identity Provider, and Asset Management solution.
![1Password](https://secureframe-prod.s3.us-west-2.amazonaws.com/zst7qxsu3pxu7m8jsha2cbkc0lw5?response-content-disposition=inline%3B%20filename%3D%22download%20%25283%2529.jpeg%22%3B%20filename%2A%3DUTF-8%27%27download%2520%25283%2529.jpeg&response-content-type=image%2Fjpeg&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAY4JYTU2EJ24YWU7R%2F20240908%2Fus-west-2%2Fs3%2Faws4_request&X-Amz-Date=20240908T000142Z&X-Amz-Expires=604800&X-Amz-SignedHeaders=host&X-Amz-Signature=60ec8ed48c645fad6891cea0b9a1015e08543b0c95545b441bc18cd91d39b3b0)
1Password
1Password is Copia's user password management solution as well as our secret's management service.