Data security statement

Acronx is committed to providing best-in-class CRM software for small and medium businesses. In support of this commitment, Acronx has developed information security risk management policies to reasonably ensure the confidentiality, integrity, and availability of Your Data that You upload to the Acronx services. This Data Security Statement (the "Statement") describes some of the security controls that Acronx has implemented pursuant to those policies. This Statement applies to Acronx services but not necessarily to the other related services provided by Acronx or to our publicly accessible websites.
Capitalized terms used in this Statement but not defined herein shall have the meaning given to them in the Acronx Subscription Use Agreement.

Infrastructure
Your Data that You submit to Acronx services is stored with a third party infrastructure service provider (the “Data Center Providers”) with automated and regularly scheduled backups. Additionally, all infrastructure configuration information is maintained separately from the Data Center Providers. Secondary locations are provisioned with sufficient computational, network, and storage resources to replace the functionality of the primary locations and restore the services if required.

Vendor Risk Management
Acronx ensures that Data Center Providers have recently completed a Service Organization Controls (SOC) 2 Type II audit. Additionally, those third parties are contractually obligated to maintain the confidentiality of Your Data to the fullest extent allowed by applicable law.

Physical Security Controls
Access to the Data Center Providers' data center facilities is restricted to authorized personnel only.
The Data Center Providers' data center facilities are secured by professional security guards.
A physical access control system (ID card and/or biometric) has been implemented at entry and exit points of the Data Center Providers' data center facilities.
All visitors must be escorted by an employee of the Data Center Providers or, in some cases, a permanent badge-holder at all times when visiting the Data Center Providers' data center facilities.

Availability and Disaster Resistance
The Data Center Providers' data center facilities are designed, built, and maintained to withstand reasonably foreseeable adverse weather and other natural conditions.
Processing capacity is monitored on a daily basis.
The Data Center Providers have installed and maintain at least the following environmental protections:
Cooling systems
Battery-powered backup electrical supply and/or backup electrical generators
Redundant communications lines
Smoke/fire detectors
Automatic fire suppression systems
The status of environmental protections is continuously monitored by the Data Center Providers.
Environmental protections are tested and maintained regularly by the Data Center Providers.

Acronx's Data Security Controls

Technical Security Controls
Acronx maintains at least the following technical security controls and policies:
The Acronx-authored software application product offerings provide end-to-end encryption using the Transport Layer Security (TLS) protocol version 1.2 or higher with a minimum of 128 bit encryption for personal data in transit.
Personal data within Acronx-authored software application product offerings is encrypted using, at a minimum, AES-256.
The Acronx-authored software application product offerings and IT systems are regularly scanned/monitored for vulnerabilities.
The Acronx-authored software application product offerings and IT systems are patched expeditiously.
External points of connectivity in the Acronx network architecture are protected by firewall(s).
Network and database activity are logged and actively monitored for potential security events including intrusion.
Acronx user passwords are stored in a one-way hash.

Administrative Security Controls
Acronx maintains at least the following administrative security controls and policies:
Physical and logical access to IT systems that process Your Data is limited to those officially authorized persons with an identified need for such access.
Acronx's workforce participates in data protection awareness training.
Acronx conducts pre-employment background checks to help ensure employee reliability.
Acronx has implemented a disaster recovery plan, which will be regularly tested. The IT systems architecture of the Acronx Service includes redundant backups of critical hardware and software components.

homeenvelopephone-handset