Security & Compliance

At Mountainise we realize that your trust is our greatest asset. We take an extra step to secure and process your data in the highest level of security, privacy, and quality. We achieve this by adhering to industry best practices like SOC 2, GDPR, and ISO 9001.

Although we are on our journey to get certified SOC 2, we already implement these high standards for all our services to provide us with the highest degree of security and quality assurance.

Our dedication to Data Quality, Privacy, and Security

SOC 2: Security, Availability, Processing Integrity, Confidentiality, and Privacy.

We adhere to SOC 2 standard in order to secure and retain the information we process in confidence. SOC 2 is an industry standard for prescriptive needs for data processing in terms of five Trust Service Criteria: Security, Availability, Processing Integrity, Confidentiality, and Privacy.

Below is how we adhere to the standards:

Security: We implement strong security practices, including firewalls, encryption, and multi-factor authentication, to secure clients’ data from unauthorized use.

Availability: We make our systems and services available to you whenever you need them, with failover, redundancy, and real-time monitoring.

Processing Integrity: We process your data with the aim to be complete, accurate, and timely so that your data gets processed error-free and efficiently.

Confidentiality: We make sure that sensitive information is protected by having strict controls on access and by making confidential information available to authorized staff. If there is any data downloaded for any work related purpose it stores in 48 hours flash folders where the files are automatically deleted from the local system. We also request to use client provided folders or storages to upload backup or important files.

Privacy: We treat your information in accordance with international privacy standards like GDPR and maintain stringent information protection policies.

Although we are in the process of obtaining SOC 2 certification, we adhere to these standards to the letter and regularly audit our internal processes to guarantee that we are in compliance with these minimum standards.

GDPR: General Data Protection Regulation

As an organization dealing with the personal data of EU citizens, Mountainise complies with the General Data Protection Regulation (GDPR). GDPR protects a person’s personal data and deals with it in legitimate, fair, and transparent terms.

Data Collection: We collect personal data only as necessary and inform you only and clearly why and how we do so.

Data Security: We employ advanced encryption techniques to secure personal data in storage and in transit.

Data Subject Rights: We are dedicated to protecting your access, correction, erasure, and restriction of processing of your personal data. You may exercise your right to access or erasure at your discretion.

Data Minimization: We store only the information that we need for our services, and we maintain it accurate and current.

Accountability: We keep extremely detailed records of all the processing activities of the data to be completely accountable and GDPR compliant.

Mountainise ensures all the employees and partners handling personal data are GDPR-compliant and informed about the requirements.

ISO 9001: Quality Management System

Quality is at the center of all that Mountainise does. We have implemented the ISO 9001:2015 Quality Management System (QMS) model, which is intended to enable organizations to deliver customer requirements consistently and enhance processes.

Customer Focus: We are of the opinion that customer satisfaction is our success mantra. Our QMS helps us to ensure that we deliver services according to your expectations and needs.

Leadership: Our leadership is dedicated to open leadership and a culture of quality and continuous improvement across the company.

Individual Involvement: We engage everyone in our quality activities and solicit suggestions from all levels to drive improvements.

Process Approach: Our processes are documented, controlled, and continuously improved to be more efficient and effective in delivering our services.

Continuous Improvement: We consistently strive to make processes better, using data and feedback to design better results for our clients.

Evidence-Based Decision Making: We figure out what works by employing good data and measures, so that our changes work and are data-driven.

Although we are not ISO 9001 certified at present, we have already applied its principles in the company and look forward to future certification.

Security Measures We Utilize

In order to give the maximum possible security and to comply with such standards, we have implemented some significant security practices:

Data Encryption: Sensitive information is encrypted in transit and in rest to ensure confidentiality.

Access control: We utilize role-based access control (RBAC) and multi-factor authentication (MFA) to restrict access to information to legitimate members of staff.

Incident Response Plan: We maintain an extensive incident response plan that has been thoroughly tested to address any possible security incidents in a timely and effective manner.

Monitoring and Logging: We can identify and react to attacks in real-time by monitoring the systems in real-time. We have complete logs for audit and analysis.

Regular Audits: We have regular internal audits to ensure our systems and procedures are at the level of protection needed by SOC 2, GDPR, and ISO 9001.

Our SOC 2 Certification Experience

Whereas we have been conforming to SOC 2-compliant practices within our business, we are now seeking official SOC 2 certification. This will officially demonstrate that we are maintaining the highest standards of security and privacy, and we are looking to do this now.

We realize security and compliance is not a one-off activity but is a continuous undertaking. In our pursuit for SOC 2 certification, we will continue to improve our procedures and practices to provide the maximum possible security to our clients.

Why This Matters to You

As your trusted business ally, we know you trust us with keeping your data safe and offering quality services. As compliant with SOC 2, GDPR, and ISO 9001, we guarantee that:

• Your data is handled confidentially and kept safe throughout the whole project process.
• Our operation is structured to deliver consistent quality and ongoing improvement to meet your requirements.
• We’re committed to respecting privacy legislation and providing you with control over your information.

Get in Touch

If you want additional details or have questions regarding our security and compliance measures, please do not hesitate to contact us. We would be more than pleased to give you more information and to reassure you that we treat your data in the best manner possible.