Product Security Overview: Ensuring Robust Protection
for Your Data

IntegrityAlert.ai prioritizes the utmost security for your data, employing a comprehensive approach to safeguard against potential threats. Our security measures encompass network intrusion prevention, stringent privacy protection, end-to-end encryption for incident reporting, and advanced data protection at rest. Authentication mechanisms and adherence to the highest security standards further fortify our platform. Rigorous internal audits, Azure Hosting Certification, and regular penetration testing underscore our commitment to providing a secure and trustworthy environment. At IntegrityAlert.ai, security is not just a feature; it's our unwavering commitment to your data's integrity and confidentiality.

Incident Reporting

For incident reporting, we utilize a robust encryption protocol. Each tenant is assigned a unique RSA key pair, and incidents are encrypted using an AES 256 key generated at the reporter's device browser. This key is further encrypted using our RSA public key, ensuring end-to-end security. Pin generation and storage against hashed databases, along with SQL Server Always Encrypted, fortify the protection of your sensitive information.

Data Encryption

In data encryption at rest, a symmetric key managed by IntegrityAlert.ai secures your data. Incident flows are meticulously crafted, employing device-generated PKI pairs, RSA encryption, and company-specific public keys. Notably, our unique approach to preventing database-level attacks includes the use of fake rows, enhancing enterprise-grade security.

Authentication Mechanisms

Our authentication mechanisms safeguard against potential threats arising from external JS applications. While team members enjoy read-only access, incident reporters are authenticated to ensure data integrity. Your security is our priority, and our comprehensive approach ensures that your data remains protected throughout its lifecycle.

IP Protection

InegrityAlert.ai prioritizes security at every stage to safeguard your valuable information. In the realm of network intrusion prevention, our IP blocklisting service acts as a formidable shield against potential threats. Throttle-triggered IP blocks are managed internally for on-premises installations, while the SaaS version employs APIM blocks for added protection.

User Privacy

We take user privacy seriously. No details, including device information, IP addresses, browser data, or user agents, are ever tracked or stored in our databases or logs. Our IP blocker service operates as an in-memory gateway, collecting IP addresses only during detected attacks to prevent DDoS threats. Temporary blocks and wait times are implemented to thwart any potential risks.

Highest security standards

IntegrityAlert.ai adheres to the highest security standards, ensuring the confidentiality and integrity of case reporters and whistleblowers information through:

End-to-End Encryption: Our platform employs robust encryption protocols, guaranteeing the secure transmission and storage of sensitive data.

Unique Access Code System: We utilize a unique code system to access whistleblower case statuses, providing an additional layer of protection against unauthorized access.

Secure Communication: IntegrityAlert.ai facilitates secure communication with whistleblowers, allowing for confidential exchanges without compromising anonymity.

Security Audit

We've completed a rigorous internal security audit on IntegrityAlert.ai, ensuring robust measures and industry compliance. This underscores our commitment to a secure environment, assuring users of the platform's integrity and strong data protection

Security Certification for Hosting

Azure Hosting Certification validates the maintenance of a secure and compliant environment, attesting to industry-leading security measures. This certification reinforces the trustworthiness of Azure-hosted services and data

Security Penetration testing

Penetration testing on the IntegrityAlert.ai platform, confirms its resilience against potential cybersecurity threats. This proactive approach underscores our dedication to ensuring a secure and trustworthy environment for our users.

Product Security Overview: Ensuring Robust Protection for Your Data