KantanMT Security

Security

At KantanMT, security, integrity and the availability of our customers' data is a top priority. We believe this is vital to their business operations and to our own success. Therefore, we use a multi-layered approach to protect and monitor this information.

Customer Data Protection

KantanMT applications are accessed across the Internet from secure and encrypted connections (SSL 3.0/TLS 1.0) using high-grade 128 bit certificates.

  • All data is backed up on a rotating schedule of incremental and full backups
  • Each customers data is fully encrypted
  • Passwords are stored only using hashing algorithms
  • Individual user sessions are protected by unique session tokens and re-verification of each transaction

Application Security

KantanMT tests all code for security vulnerabilities before release and regularly scans our network and systems for vulnerabilities.

  • KantanMT's SaaS services are based on proven and secure Open Source solutions and custom applications
  • Applications and servers are regularly patched to provide ongoing protection from exploits
  • Every major SaaS software release is tested by QA for a full scope of security risks

Physical and Environmental Security

Our service is hosted at top-tier data centres. The data centre provider maintains:

  • Biometric scanning for controlled data centre access
  • Security camera monitoring at all data centre locations
  • 24x7 onsite staff provides additional protection against unauthorised entry
  • Unmarked facilities to help maintain low profile
  • Redundant HVAC (Heating Ventilation Air Conditioning) units which provide consistent temperature and humidity within the raised floor area
  • Sensors to detect environmental hazards, including smoke detectors and floor water detectors
  • Raised flooring to protect hardware and communications equipment from water damage
  • Fire detection and suppression systems (dry-pipe, pre-action water-based)
  • Redundant (N+1) UPS power subsystem with instantaneous failover

eCommerce Transactions

Our eCommerce service is hosted by certified and compliant industry leaders. These maintain:

  • Full PCI DSS Level 1 certification
  • SAS70 type II, SSAE 16, CAN-SPAM and EU Safe Harbor compliance
  • Traffic encryption through state-of-the art encryption layers
  • Multiple segregated networks; highly restrictive configured firewalls and routers
  • Regular audits by external security firms
  • Intrusion Detection System monitors network and system-related parameters
  • Security experts and system administrators on call 24/7

Contact Us