Adeptia Connect provides a secure end-to-end encrypted environment for all data that is transferred and exchanged between the companies and its partners. Adeptia has multiple features that are implemented right from the implementation until a transaction is complete. This ensures that all the user data transacted through Adeptia is secured and does not move out. Following is the list of security features of Adeptia Connect.
...
| Anchor | ||||
|---|---|---|---|---|
|
Certain Adeptia Connect Connectors use certificates in order to ensure security when transmitting data across a communication protocol. Connectors such as FTPS, SFTP, HTTPS, and many others require the use of certificates in order to encrypt data and channels and to verify the digital signature of the application sending the data. The Certificate Component can use an existing key obtained from a certificate authority such as VeriSign or a key generated by Adeptia.
On-Premise Installation in DMZ Environment
...
In an encryption process, the data (referred to as plaintext) is encrypted using an encryption algorithm, turning it into an unreadable ciphertext. This is usually done with the use of an encryption key, which specifies how the data is to be encoded. An authorized party, however, is able to decode the ciphertext using a decryption algorithm which usually requires a secret decryption key. For more information, click here.
| Anchor |
|---|
...
Adeptia Connect follows these guidelines to logically separate objects.
...
...
- Data store schema design
...
| Anchor | |||
|---|---|---|---|
|
...
- Access to Shared Connections is only allowed to authorized customers or partners
- Systems track all those who are authorized
- Admin has the ability to revoke access
Anchor Data_Security Data_Security
Data Security
| Data_Security | |
| Data_Security |
It is important to note that at no point during the Connection configuration or run-time process does Adeptia Connect store the data. Adeptia Connect is engineered to optimize interoperability of applications and facilitate your integration processes without saving your data in our data center, unless specifically configured to do so.On-Premise Data – Data that processes through an 'On Premise' Adeptia Secure Engine will never actually flow through cloud data center. The data is stored behind the firewall on a customer server where the Connection is executed and is transported directly to the Secure Engine configured behind your company's firewall. Later in this section, we will describe the benefits of Secure Bridge and Secure Engine.. The logging history is deleted after the transaction is successfully completed.
Summary
Adeptia takes security very seriously and has gone to great lengths to ensure the integrity of customer data. Some of the important findings in the Security Assessment Report are:
- The application is architected to not to save a local copy of the customer data. If data does not exist, it cannot be compromised
- Customers may select to utilize dedicated servers for processing of their data, this ensures their data is at no time in the multi-tenant environment
- All web access to Adeptia Connect is thru through secure HTTPS connections
- All access to sources and targets is thru through secure SSL connections
- Adeptia Connect is architected to prevent attacks such as SQL injection, cross-site scripting, OWASP Top 10 risks and many others.
- Adeptia utilizes a third party, independent company to do regular penetration and security vulnerability assessment tests.