Trust
The controls we operate with
These are the controls we apply verifiably across our operation and ADN Vortex.
If your purchasing process requires a specific certification, flag it at the start: we assess the requirement and confirm scope and timelines.
Access and authentication
- Two-step authentication mandatory for the internal team
- Role-based permissions, reviewed at least twice a year
- Production access limited and logged
- Credentials rotated and stored in an encrypted manager
- Immediate revocation when a contract ends
Data
- Encryption in transit with TLS 1.2 or above
- Encryption at rest for databases and backups
- Logical data separation between tenants in ADN Vortex
- Client data used only to provide the service
- Full export available on client request
Continuity
- Daily backups with retention defined by contract
- Periodic restore testing, not just backup testing
- Redundant infrastructure across several availability zones
- 99.9% availability target measured monthly
- Incident response plan with assigned roles
Development
- Peer code review before merging
- Static and dependency analysis on every integration
- Separate development, testing and production environments
- Reversible and logged deployments
- Production data is never copied to test environments
Applicable legal framework
| Data protection | Law 1581 of 2012 and implementing decrees (Colombia) |
|---|---|
| Clients in the European Union | Processing aligned with the GDPR |
| Data controller | ADN SOFT S.A.S. · Tax ID 902094914-1 |
| Privacy contact | privacy@adnsoftsas.com |
| Vulnerability reporting | security@adnsoftsas.com |
Need the detail for your risk team?
We share the controls documentation under a confidentiality agreement.
English
SeguridadTérminos y privacidadPolítica de privacidad
Estado
Todos los derechos reservados © ADN Soft SAS
