Overview
eCore Services LLC takes information security seriously. Our security and compliance framework spans personnel, development, testing, cloud infrastructure, and regulatory compliance. Below is a summary of the practices we follow to keep your data safe.
Secure Personnel
We enforce background checks for all staff and require confidentiality agreements. We also conduct employee security training and testing using current and emerging techniques and attack vectors.
Secure Development
Development follows established secure lifecycle principles. Teams performing system work receive annual secure development training and adhere to OWASP Top 10 web application security standards.
Secure Testing
We deploy both internal security engineers and external penetration testing firms regularly. We perform static and dynamic software application security testing of all code, including open source libraries.
Cloud Security
The platform emphasizes customer isolation within dedicated trust zones. All data is encrypted in transit and at rest, with role-based access controls and the principles of least privileged access.
Compliance & Certifications
We obtained SOC 2 Type II certification through Prescient Assurance, confirming our information security practices, policies, procedures, and operations meet the SOC 2 standards.
Certifications
Our commitment to security and responsible business is reflected in the certifications and audits we maintain.
Reporting a Security Concern
If you believe you have discovered a security vulnerability or have a concern related to the security of our services, please contact us at info@ecoreservice.com. We investigate every report we receive.